00000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x9000000, 0x3, [0x0, 0x2000000000000057]}) [ 1449.344244] ? __handle_mm_fault+0x4552/0x55a0 [ 1449.344260] ? lock_acquire+0x1db/0x570 [ 1449.344282] ? kasan_check_read+0x11/0x20 [ 1449.344297] ? do_raw_spin_unlock+0xa0/0x330 [ 1449.374881] ? do_raw_spin_trylock+0x270/0x270 [ 1449.379457] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1449.384587] __handle_mm_fault+0x4563/0x55a0 [ 1449.388999] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1449.393846] ? check_preemption_disabled+0x48/0x290 [ 1449.398890] ? handle_mm_fault+0x3cc/0xc80 [ 1449.403165] ? lock_downgrade+0x910/0x910 [ 1449.407305] ? kasan_check_read+0x11/0x20 03:52:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xb000000, 0x3, [0x0, 0x2000000000000057]}) [ 1449.411452] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1449.416751] ? rcu_read_unlock_special+0x380/0x380 [ 1449.421697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1449.427261] ? check_preemption_disabled+0x48/0x290 [ 1449.432275] handle_mm_fault+0x4ec/0xc80 [ 1449.436334] ? __handle_mm_fault+0x55a0/0x55a0 [ 1449.440921] __do_page_fault+0x5da/0xd60 [ 1449.444989] do_page_fault+0xe6/0x7d8 [ 1449.448811] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1449.453755] ? vmalloc_sync_all+0x30/0x30 [ 1449.457934] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1449.463404] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1449.468332] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1449.473344] ? page_fault+0x8/0x30 [ 1449.476904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1449.481754] ? page_fault+0x8/0x30 [ 1449.485303] page_fault+0x1e/0x30 [ 1449.488752] RIP: 0033:0x451910 [ 1449.491965] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1449.510869] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1449.513211] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1449.516240] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1449.516248] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1449.516256] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1449.516263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1449.516271] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xc000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:45 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1449.623660] CPU: 1 PID: 6072 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #21 [ 1449.630774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.640131] Call Trace: [ 1449.640147] dump_stack+0x1db/0x2d0 [ 1449.640162] ? dump_stack_print_info.cold+0x20/0x20 [ 1449.640200] handle_userfault.cold+0x3d/0x5c [ 1449.640221] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1449.660371] ? print_usage_bug+0xd0/0xd0 [ 1449.664432] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1449.669670] ? print_usage_bug+0xd0/0xd0 [ 1449.673746] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1449.678774] ? add_lock_to_list.isra.0+0x450/0x450 [ 1449.683713] ? __handle_mm_fault+0x4552/0x55a0 [ 1449.688290] ? find_held_lock+0x35/0x120 [ 1449.692347] ? __handle_mm_fault+0x4552/0x55a0 [ 1449.696945] ? lock_acquire+0x1db/0x570 [ 1449.700947] ? kasan_check_read+0x11/0x20 [ 1449.705094] ? do_raw_spin_unlock+0xa0/0x330 [ 1449.709510] ? do_raw_spin_trylock+0x270/0x270 [ 1449.714104] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1449.719261] __handle_mm_fault+0x4563/0x55a0 [ 1449.723702] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1449.728559] ? check_preemption_disabled+0x48/0x290 [ 1449.733594] ? handle_mm_fault+0x3cc/0xc80 [ 1449.737844] ? lock_downgrade+0x910/0x910 [ 1449.741993] ? kasan_check_read+0x11/0x20 [ 1449.746152] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1449.751433] ? rcu_read_unlock_special+0x380/0x380 [ 1449.756367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1449.761909] ? check_preemption_disabled+0x48/0x290 [ 1449.766952] handle_mm_fault+0x4ec/0xc80 [ 1449.771028] ? __handle_mm_fault+0x55a0/0x55a0 [ 1449.775640] __do_page_fault+0x5da/0xd60 [ 1449.779718] do_page_fault+0xe6/0x7d8 [ 1449.783522] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1449.788462] ? vmalloc_sync_all+0x30/0x30 [ 1449.792633] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1449.798106] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1449.803046] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1449.808101] ? page_fault+0x8/0x30 [ 1449.811646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1449.816505] ? page_fault+0x8/0x30 [ 1449.820066] page_fault+0x1e/0x30 [ 1449.823535] RIP: 0033:0x451910 [ 1449.826732] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1449.845632] RSP: 002b:00007fdd790477a8 EFLAGS: 00010202 [ 1449.851008] RAX: 00007fdd79047850 RBX: 0000000000000003 RCX: 000000000000000e [ 1449.858275] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fdd79047850 [ 1449.865541] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1449.872820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd790486d4 [ 1449.880121] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$KDSETLED(r2, 0x4b32, 0x3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xd000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:45 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) sync_file_range(r1, 0xf2, 0x6, 0x7) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1450.073227] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1450.094048] CPU: 1 PID: 6095 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1450.101181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.110529] Call Trace: [ 1450.113114] dump_stack+0x1db/0x2d0 [ 1450.116752] ? dump_stack_print_info.cold+0x20/0x20 [ 1450.121784] handle_userfault.cold+0x3d/0x5c [ 1450.126228] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1450.130856] ? print_usage_bug+0xd0/0xd0 [ 1450.134920] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1450.140107] ? print_usage_bug+0xd0/0xd0 03:52:45 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1450.144172] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1450.149191] ? add_lock_to_list.isra.0+0x450/0x450 [ 1450.154181] ? __handle_mm_fault+0x4552/0x55a0 [ 1450.158769] ? find_held_lock+0x35/0x120 [ 1450.162857] ? __handle_mm_fault+0x4552/0x55a0 [ 1450.167484] ? lock_acquire+0x1db/0x570 [ 1450.171488] ? kasan_check_read+0x11/0x20 [ 1450.175650] ? do_raw_spin_unlock+0xa0/0x330 [ 1450.180084] ? do_raw_spin_trylock+0x270/0x270 [ 1450.184687] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1450.189810] __handle_mm_fault+0x4563/0x55a0 03:52:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x10000000, 0x3, [0x0, 0x2000000000000057]}) [ 1450.194233] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1450.194257] ? check_preemption_disabled+0x48/0x290 [ 1450.194275] ? handle_mm_fault+0x3cc/0xc80 [ 1450.194302] ? lock_downgrade+0x910/0x910 [ 1450.212515] ? kasan_check_read+0x11/0x20 [ 1450.216685] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1450.221968] ? rcu_read_unlock_special+0x380/0x380 [ 1450.227093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1450.232653] ? check_preemption_disabled+0x48/0x290 [ 1450.237682] handle_mm_fault+0x4ec/0xc80 03:52:45 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1450.241753] ? __handle_mm_fault+0x55a0/0x55a0 [ 1450.246355] __do_page_fault+0x5da/0xd60 [ 1450.250439] do_page_fault+0xe6/0x7d8 [ 1450.254249] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1450.259220] ? vmalloc_sync_all+0x30/0x30 [ 1450.263385] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1450.268850] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1450.273790] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1450.278811] ? page_fault+0x8/0x30 [ 1450.282361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1450.287252] ? page_fault+0x8/0x30 [ 1450.290800] page_fault+0x1e/0x30 [ 1450.294262] RIP: 0033:0x451910 [ 1450.297461] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1450.316376] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1450.321744] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1450.329019] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1450.336308] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:52:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:46 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x13000000, 0x3, [0x0, 0x2000000000000057]}) [ 1450.343600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1450.350870] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000000c0)={0x0, 0x800}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000000000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1450.529842] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1450.545069] CPU: 1 PID: 6135 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1450.552203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.561558] Call Trace: [ 1450.564145] dump_stack+0x1db/0x2d0 [ 1450.567778] ? dump_stack_print_info.cold+0x20/0x20 [ 1450.572839] handle_userfault.cold+0x3d/0x5c [ 1450.577267] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1450.581846] ? print_usage_bug+0xd0/0xd0 [ 1450.585905] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1450.591097] ? print_usage_bug+0xd0/0xd0 [ 1450.595135] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1450.600127] ? add_lock_to_list.isra.0+0x450/0x450 [ 1450.605070] ? __handle_mm_fault+0x4552/0x55a0 [ 1450.609629] ? find_held_lock+0x35/0x120 [ 1450.613699] ? __handle_mm_fault+0x4552/0x55a0 [ 1450.618270] ? lock_acquire+0x1db/0x570 [ 1450.622245] ? kasan_check_read+0x11/0x20 [ 1450.626371] ? do_raw_spin_unlock+0xa0/0x330 [ 1450.630757] ? do_raw_spin_trylock+0x270/0x270 [ 1450.635322] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1450.640407] __handle_mm_fault+0x4563/0x55a0 [ 1450.644823] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1450.649662] ? check_preemption_disabled+0x48/0x290 [ 1450.654662] ? handle_mm_fault+0x3cc/0xc80 [ 1450.658905] ? lock_downgrade+0x910/0x910 [ 1450.663028] ? kasan_check_read+0x11/0x20 [ 1450.667152] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1450.672429] ? rcu_read_unlock_special+0x380/0x380 [ 1450.677371] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1450.682931] ? check_preemption_disabled+0x48/0x290 [ 1450.687947] handle_mm_fault+0x4ec/0xc80 [ 1450.692014] ? __handle_mm_fault+0x55a0/0x55a0 [ 1450.696588] __do_page_fault+0x5da/0xd60 [ 1450.700629] do_page_fault+0xe6/0x7d8 [ 1450.704409] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1450.709314] ? vmalloc_sync_all+0x30/0x30 [ 1450.713450] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1450.718910] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1450.723827] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1450.728822] ? page_fault+0x8/0x30 [ 1450.732345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1450.737195] ? page_fault+0x8/0x30 [ 1450.740711] page_fault+0x1e/0x30 [ 1450.744138] RIP: 0033:0x451910 [ 1450.747307] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1450.766212] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1450.771567] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1450.778824] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1450.786068] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1450.793309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1450.800552] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1450.826773] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1450.831283] CPU: 1 PID: 6139 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #21 [ 1450.838374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.847751] Call Trace: [ 1450.850358] dump_stack+0x1db/0x2d0 [ 1450.853966] ? dump_stack_print_info.cold+0x20/0x20 [ 1450.858962] handle_userfault.cold+0x3d/0x5c [ 1450.863363] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1450.867950] ? print_usage_bug+0xd0/0xd0 [ 1450.872022] ? futex_wait_setup+0x430/0x430 [ 1450.876321] ? print_usage_bug+0xd0/0xd0 [ 1450.880360] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1450.885372] ? add_lock_to_list.isra.0+0x450/0x450 [ 1450.890294] ? __handle_mm_fault+0x4552/0x55a0 [ 1450.894856] ? find_held_lock+0x35/0x120 [ 1450.898894] ? __handle_mm_fault+0x4552/0x55a0 [ 1450.903504] ? lock_acquire+0x1db/0x570 [ 1450.907470] ? kasan_check_read+0x11/0x20 [ 1450.911605] ? do_raw_spin_unlock+0xa0/0x330 [ 1450.915993] ? do_raw_spin_trylock+0x270/0x270 [ 1450.920571] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1450.925656] __handle_mm_fault+0x4563/0x55a0 [ 1450.930052] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1450.934890] ? check_preemption_disabled+0x48/0x290 [ 1450.939916] ? handle_mm_fault+0x3cc/0xc80 [ 1450.944166] ? lock_downgrade+0x910/0x910 [ 1450.948314] ? kasan_check_read+0x11/0x20 [ 1450.952452] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1450.957714] ? rcu_read_unlock_special+0x380/0x380 [ 1450.962623] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1450.968159] ? check_preemption_disabled+0x48/0x290 [ 1450.973156] handle_mm_fault+0x4ec/0xc80 [ 1450.977213] ? __handle_mm_fault+0x55a0/0x55a0 [ 1450.981798] __do_page_fault+0x5da/0xd60 [ 1450.985871] do_page_fault+0xe6/0x7d8 [ 1450.989682] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1450.994620] ? vmalloc_sync_all+0x30/0x30 [ 1450.998764] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1451.004228] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1451.009182] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1451.014193] ? page_fault+0x8/0x30 [ 1451.017735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1451.022573] ? page_fault+0x8/0x30 [ 1451.026110] page_fault+0x1e/0x30 03:52:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:46 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x14000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1451.029552] RIP: 0033:0x451910 [ 1451.032757] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1451.051662] RSP: 002b:00007fdd790477a8 EFLAGS: 00010202 [ 1451.057047] RAX: 00007fdd79047850 RBX: 0000000000000003 RCX: 000000000000000e [ 1451.064358] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fdd79047850 [ 1451.071650] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:52:46 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x20000000, 0x3, [0x0, 0x2000000000000057]}) [ 1451.078917] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd790486d4 [ 1451.086195] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x4) r2 = userfaultfd(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x7fff, 0xcb, 0x7fffffff, 0x200, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x400, 0xfffffffffffffff7, 0x5, 0x1, 0x5}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x7}, &(0x7f0000000300)=0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) splice(r3, &(0x7f0000000100), r2, &(0x7f0000000140), 0x6, 0xc) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000040)='lapb0\x00') 03:52:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1451.280578] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1451.292635] CPU: 0 PID: 6143 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #21 [ 1451.299749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.309114] Call Trace: [ 1451.311724] dump_stack+0x1db/0x2d0 [ 1451.315365] ? dump_stack_print_info.cold+0x20/0x20 [ 1451.320423] handle_userfault.cold+0x3d/0x5c [ 1451.324850] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1451.329452] ? print_usage_bug+0xd0/0xd0 [ 1451.333582] ? futex_wait_setup+0x430/0x430 [ 1451.337910] ? print_usage_bug+0xd0/0xd0 [ 1451.341966] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1451.346991] ? add_lock_to_list.isra.0+0x450/0x450 [ 1451.351932] ? __handle_mm_fault+0x4552/0x55a0 [ 1451.356522] ? find_held_lock+0x35/0x120 [ 1451.360584] ? __handle_mm_fault+0x4552/0x55a0 [ 1451.365169] ? lock_acquire+0x1db/0x570 [ 1451.369152] ? kasan_check_read+0x11/0x20 [ 1451.373302] ? do_raw_spin_unlock+0xa0/0x330 [ 1451.377743] ? do_raw_spin_trylock+0x270/0x270 [ 1451.382322] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1451.387428] __handle_mm_fault+0x4563/0x55a0 [ 1451.391851] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1451.396690] ? check_preemption_disabled+0x48/0x290 [ 1451.401797] ? handle_mm_fault+0x3cc/0xc80 [ 1451.406043] ? lock_downgrade+0x910/0x910 [ 1451.410187] ? kasan_check_read+0x11/0x20 [ 1451.414333] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1451.419606] ? rcu_read_unlock_special+0x380/0x380 [ 1451.424532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 03:52:46 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x20000040, 0x3, [0x0, 0x2000000000000057]}) 03:52:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1451.430060] ? check_preemption_disabled+0x48/0x290 [ 1451.435098] handle_mm_fault+0x4ec/0xc80 [ 1451.439188] ? __handle_mm_fault+0x55a0/0x55a0 [ 1451.443782] __do_page_fault+0x5da/0xd60 [ 1451.447847] do_page_fault+0xe6/0x7d8 [ 1451.451643] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1451.456567] ? vmalloc_sync_all+0x30/0x30 [ 1451.460706] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1451.466200] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1451.471121] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1451.476148] ? page_fault+0x8/0x30 [ 1451.479702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1451.484551] ? page_fault+0x8/0x30 [ 1451.488100] page_fault+0x1e/0x30 [ 1451.488110] RIP: 0033:0x451910 [ 1451.488123] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1451.488145] RSP: 002b:00007fdd790267a8 EFLAGS: 00010202 [ 1451.488155] RAX: 00007fdd79026850 RBX: 0000000000000003 RCX: 000000000000000e [ 1451.488179] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fdd79026850 [ 1451.488187] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1451.488194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd790276d4 [ 1451.488216] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1451.495694] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1451.575513] CPU: 1 PID: 6173 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1451.582613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.591967] Call Trace: [ 1451.594558] dump_stack+0x1db/0x2d0 [ 1451.598188] ? dump_stack_print_info.cold+0x20/0x20 [ 1451.603255] handle_userfault.cold+0x3d/0x5c [ 1451.607678] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1451.612264] ? print_usage_bug+0xd0/0xd0 [ 1451.616332] ? futex_wait_setup+0x430/0x430 [ 1451.620641] ? print_usage_bug+0xd0/0xd0 [ 1451.624683] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1451.629682] ? add_lock_to_list.isra.0+0x450/0x450 [ 1451.634617] ? __handle_mm_fault+0x4552/0x55a0 [ 1451.639188] ? find_held_lock+0x35/0x120 [ 1451.643250] ? __handle_mm_fault+0x4552/0x55a0 [ 1451.647815] ? lock_acquire+0x1db/0x570 [ 1451.651772] ? kasan_check_read+0x11/0x20 [ 1451.655898] ? do_raw_spin_unlock+0xa0/0x330 [ 1451.660341] ? do_raw_spin_trylock+0x270/0x270 [ 1451.664916] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1451.670015] __handle_mm_fault+0x4563/0x55a0 [ 1451.674408] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1451.679247] ? check_preemption_disabled+0x48/0x290 [ 1451.684272] ? handle_mm_fault+0x3cc/0xc80 [ 1451.688514] ? lock_downgrade+0x910/0x910 [ 1451.692649] ? kasan_check_read+0x11/0x20 [ 1451.696779] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1451.702048] ? rcu_read_unlock_special+0x380/0x380 [ 1451.706987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1451.712507] ? check_preemption_disabled+0x48/0x290 [ 1451.717505] handle_mm_fault+0x4ec/0xc80 [ 1451.721548] ? __handle_mm_fault+0x55a0/0x55a0 [ 1451.726132] __do_page_fault+0x5da/0xd60 [ 1451.730208] do_page_fault+0xe6/0x7d8 [ 1451.734023] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1451.738948] ? vmalloc_sync_all+0x30/0x30 [ 1451.743076] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1451.748511] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1451.753434] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1451.758435] ? page_fault+0x8/0x30 [ 1451.761964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1451.766801] ? page_fault+0x8/0x30 [ 1451.770337] page_fault+0x1e/0x30 [ 1451.773769] RIP: 0033:0x451910 [ 1451.776970] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1451.795860] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1451.801226] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1451.808483] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1451.815747] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1451.823014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 03:52:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x505080, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x9, 0x4, 0x8, 0x7fff]}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000014000/0x1000)=nil, 0x1000}, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x1ff}, 0x8) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:47 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x21000000, 0x3, [0x0, 0x2000000000000057]}) [ 1451.830259] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/capi/capi20ncci\x00', 0x40, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) write(r2, &(0x7f00000000c0)="e6a22a4ee1da0e5c5f27eca457e6e3cf719e7da39ccb4760e3cd6314ef3f09e6587a9d054693cd6f164b8e9b5add701b3e2070cfbec4baaee2ecff68d46596c962aa2b722c1cadcd15a59c74317442733e23967647fe4ba97d5a6ead70e126332f87922d55eaa590", 0x68) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1451.889819] net_ratelimit: 36 callbacks suppressed [ 1451.889828] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1451.956708] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1451.972154] FAULT_FLAG_ALLOW_RETRY missing 70 03:52:47 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x36000000, 0x3, [0x0, 0x2000000000000057]}) [ 1452.005704] CPU: 0 PID: 6201 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #21 [ 1452.012830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.022181] Call Trace: [ 1452.024787] dump_stack+0x1db/0x2d0 [ 1452.028447] ? dump_stack_print_info.cold+0x20/0x20 [ 1452.033514] handle_userfault.cold+0x3d/0x5c [ 1452.037939] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1452.042558] ? print_usage_bug+0xd0/0xd0 [ 1452.046624] ? futex_wait_setup+0x430/0x430 [ 1452.050943] ? print_usage_bug+0xd0/0xd0 [ 1452.055049] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1452.060106] ? add_lock_to_list.isra.0+0x450/0x450 [ 1452.065043] ? __handle_mm_fault+0x4552/0x55a0 [ 1452.069640] ? find_held_lock+0x35/0x120 [ 1452.073717] ? __handle_mm_fault+0x4552/0x55a0 [ 1452.078300] ? lock_acquire+0x1db/0x570 [ 1452.082280] ? kasan_check_read+0x11/0x20 [ 1452.086437] ? do_raw_spin_unlock+0xa0/0x330 [ 1452.090843] ? do_raw_spin_trylock+0x270/0x270 [ 1452.095438] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1452.100548] __handle_mm_fault+0x4563/0x55a0 [ 1452.104964] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1452.109807] ? check_preemption_disabled+0x48/0x290 [ 1452.113684] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1452.114830] ? handle_mm_fault+0x3cc/0xc80 [ 1452.114856] ? lock_downgrade+0x910/0x910 [ 1452.114868] ? kasan_check_read+0x11/0x20 [ 1452.114883] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1452.114916] ? rcu_read_unlock_special+0x380/0x380 [ 1452.137334] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:47 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x40000020, 0x3, [0x0, 0x2000000000000057]}) [ 1452.140905] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1452.140921] ? check_preemption_disabled+0x48/0x290 [ 1452.140942] handle_mm_fault+0x4ec/0xc80 [ 1452.140960] ? __handle_mm_fault+0x55a0/0x55a0 [ 1452.140987] __do_page_fault+0x5da/0xd60 [ 1452.141009] do_page_fault+0xe6/0x7d8 [ 1452.181017] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1452.185974] ? vmalloc_sync_all+0x30/0x30 [ 1452.190112] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1452.195581] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1452.200530] ? prepare_exit_to_usermode+0x232/0x3b0 03:52:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1452.205548] ? page_fault+0x8/0x30 [ 1452.209106] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1452.213954] ? page_fault+0x8/0x30 [ 1452.217536] page_fault+0x1e/0x30 [ 1452.221011] RIP: 0033:0x451910 [ 1452.224210] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1452.243327] RSP: 002b:00007fdd790477a8 EFLAGS: 00010202 [ 1452.248685] RAX: 00007fdd79047850 RBX: 0000000000000003 RCX: 000000000000000e [ 1452.248693] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fdd79047850 [ 1452.248700] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1452.248708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd790486d4 [ 1452.248716] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1452.292227] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1452.306977] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1452.311647] CPU: 0 PID: 6206 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #21 [ 1452.318769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.328132] Call Trace: [ 1452.330723] dump_stack+0x1db/0x2d0 [ 1452.334357] ? dump_stack_print_info.cold+0x20/0x20 [ 1452.339413] handle_userfault.cold+0x3d/0x5c [ 1452.343876] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1452.348458] ? print_usage_bug+0xd0/0xd0 [ 1452.352546] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1452.357849] ? print_usage_bug+0xd0/0xd0 [ 1452.361924] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1452.366973] ? add_lock_to_list.isra.0+0x450/0x450 [ 1452.371935] ? __handle_mm_fault+0x4552/0x55a0 [ 1452.376578] ? find_held_lock+0x35/0x120 [ 1452.380639] ? __handle_mm_fault+0x4552/0x55a0 [ 1452.385252] ? lock_acquire+0x1db/0x570 [ 1452.389246] ? kasan_check_read+0x11/0x20 [ 1452.389261] ? do_raw_spin_unlock+0xa0/0x330 [ 1452.389276] ? do_raw_spin_trylock+0x270/0x270 [ 1452.389291] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1452.389314] __handle_mm_fault+0x4563/0x55a0 [ 1452.389335] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1452.416792] ? check_preemption_disabled+0x48/0x290 [ 1452.421811] ? handle_mm_fault+0x3cc/0xc80 [ 1452.426093] ? lock_downgrade+0x910/0x910 [ 1452.430234] ? kasan_check_read+0x11/0x20 [ 1452.434375] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1452.439668] ? rcu_read_unlock_special+0x380/0x380 [ 1452.444619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1452.450155] ? check_preemption_disabled+0x48/0x290 [ 1452.455208] handle_mm_fault+0x4ec/0xc80 [ 1452.459284] ? __handle_mm_fault+0x55a0/0x55a0 [ 1452.463873] __do_page_fault+0x5da/0xd60 [ 1452.467958] do_page_fault+0xe6/0x7d8 [ 1452.471758] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1452.476725] ? vmalloc_sync_all+0x30/0x30 [ 1452.480890] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1452.486338] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1452.486819] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1452.491282] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1452.491298] ? page_fault+0x8/0x30 [ 1452.491313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1452.491328] ? page_fault+0x8/0x30 [ 1452.491357] page_fault+0x1e/0x30 [ 1452.519846] RIP: 0033:0x451910 [ 1452.523033] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1452.541926] RSP: 002b:00007fdd790267a8 EFLAGS: 00010202 [ 1452.547287] RAX: 00007fdd79026850 RBX: 0000000000000003 RCX: 000000000000000e [ 1452.554550] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fdd79026850 [ 1452.561835] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1452.567080] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1452.569102] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fdd790276d4 [ 1452.569112] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1452.595977] CPU: 1 PID: 6209 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1452.603095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.612448] Call Trace: [ 1452.615062] dump_stack+0x1db/0x2d0 [ 1452.618693] ? dump_stack_print_info.cold+0x20/0x20 [ 1452.623712] handle_userfault.cold+0x3d/0x5c [ 1452.628178] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1452.632762] ? print_usage_bug+0xd0/0xd0 [ 1452.636865] ? futex_wait_setup+0x430/0x430 [ 1452.641200] ? print_usage_bug+0xd0/0xd0 [ 1452.645277] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1452.650288] ? add_lock_to_list.isra.0+0x450/0x450 [ 1452.655215] ? __handle_mm_fault+0x4552/0x55a0 [ 1452.659794] ? find_held_lock+0x35/0x120 [ 1452.663848] ? __handle_mm_fault+0x4552/0x55a0 [ 1452.668419] ? lock_acquire+0x1db/0x570 [ 1452.672407] ? kasan_check_read+0x11/0x20 [ 1452.676546] ? do_raw_spin_unlock+0xa0/0x330 [ 1452.680980] ? do_raw_spin_trylock+0x270/0x270 [ 1452.685555] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1452.690655] __handle_mm_fault+0x4563/0x55a0 [ 1452.695077] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1452.699936] ? check_preemption_disabled+0x48/0x290 [ 1452.704949] ? handle_mm_fault+0x3cc/0xc80 [ 1452.709205] ? lock_downgrade+0x910/0x910 [ 1452.713341] ? kasan_check_read+0x11/0x20 [ 1452.717483] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1452.722763] ? rcu_read_unlock_special+0x380/0x380 [ 1452.727686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1452.733224] ? check_preemption_disabled+0x48/0x290 [ 1452.738258] handle_mm_fault+0x4ec/0xc80 [ 1452.742310] ? __handle_mm_fault+0x55a0/0x55a0 [ 1452.746888] __do_page_fault+0x5da/0xd60 [ 1452.750977] do_page_fault+0xe6/0x7d8 [ 1452.754768] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1452.759690] ? vmalloc_sync_all+0x30/0x30 [ 1452.763823] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1452.769265] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1452.774200] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1452.779223] ? page_fault+0x8/0x30 [ 1452.782777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1452.787613] ? page_fault+0x8/0x30 [ 1452.791155] page_fault+0x1e/0x30 [ 1452.794622] RIP: 0033:0x451910 03:52:48 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x40010000, 0x3, [0x0, 0x2000000000000057]}) 03:52:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1452.797802] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1452.816701] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1452.822052] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1452.829320] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1452.836611] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1452.843882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1452.851138] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000940)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40a001) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000980)={0x0, 0xffffffffffff9fab}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000a00)=@assoc_value={r2, 0xffff}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000000, 0x14, r0, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setown(r0, 0x8, r3) fcntl$getown(r0, 0x9) r4 = socket(0x5, 0x0, 0x8) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)="d9efde4dc655f7e733b99d91f85d2238e5b1ef7489026e3a066ea985cfd5cc636c922f53f80bd5dde584bc9cb3f195d65995c63b09f2a3bbf6abb49ab4226b78a8b22ea99896a88a2398cf5a09597c60d0d5a45c1c4dbb650f267c9923ca42787f62ab7055371878c5d3b8755abd65b15a1f4b4ed9c677e0839ecdcd143fc15183c7338007e45922dc67b396069d8e580407063ff0cba86f191ae446861ac356f0c92de406e3d16117c53fbd58df935d1221f81cc3b8a65fd4651324f6a74ddf2213cfd1819c27811955e386890dfc3e01513ad5badc5ba7af3c", 0xda}, {&(0x7f00000002c0)="92532e75c57e745ab931937e642b68993ede0e487fb4e8474f39d773b92da2671cd142b159f8506225ef2f3fe6749199d83bd156afc4c88cc756596ebaa0b65c6c109235d9c0e040bd77977e77f542e76b96e49ee66ef020998dcf4907662fb5a88eed3e38476c1cfb0e1f3ada1bd7764ad2b395e9a81be4a346c2415bf382d75452d9f405e4bb95f3655b5853a7ef8bda5266b230dcf2e15a3357fcfc895b8ea8d0ebf1769c46380e5329ba960fda1878f1e7be9c949e017cfacff015c6aa7cc23b60e9d8343ef2bb5a0c68e239620aebc022475beec950b10548", 0xdb}, {&(0x7f00000003c0)="030d9bb1c5e3025d3d7e4a8c4b64988db50787885914fdae05f24fff3f11022867c56d4479d7d556d4e0bbb2fde9a76730108b16d38c13d10b4deccb45eb69466ef9a8d02465a526ceaf7878646bb3e23fadeeb45ae6ecec600c5d7287f59ca00e7669f2386818f52e651cf8d75e0bc7da9f14539fc005d0c94a8e1d56738775f5ce51ac90f9de4c985c35104b4a225dfc51fe474c8656839b54fe798ae0eab9b37be125aba274366f71db8b7a7bdfedeb", 0xb1}, {&(0x7f0000000480)="388ae37a6dbe042d6cca02d976c4573dbef9e284d5fdb73718dcb9993d4c247e2981b8b2a639dbc949d46f30c3fc83f09999ec452c34aa061e67bf70cf04f9220b368d34518bad206932e47b5d2c4c644084f2cb44006829cb1ba2320bc1734d0ce52f503604f62b10ea3166a2f5c8d80c21477eb6ea4c71dca6c4992e0454c64881dd14469f892bcb17ceee", 0x8c}, {&(0x7f0000000540)="e1079cb9f8d7ef1f4ee30b2b269f4d8d05e3455ec1ea8755d74cca7ed7d8e6facdd76eb5be6dfc34df8bddd9232a1c73a7f38aa2edaf0ac0c4a8146cf1a36df342c8653f792b837c229bba9ff00e34ad5ff410adc794e8950d830477c4c5192240f9a57fa7e6c1432db970557c528bb6b27b5a673cc336c735f9341c954958f08dc1114ac3ba2a359cabe4bf44c0e25b3cdca568d2a46f8b86802042e84ee5db11bc62c925cea147fb0324f046a70ece36868341082ad07b6c487a5b42482356d216111a49ca44f10879bcdad306377fb31671", 0xd3}, {&(0x7f0000000640)="9e34c026c8a5fdc0b4925f3f8382768944571fe6a7f90b7e1ae7af97a8b5e68032e51b62f16d6f16f03fb4b020b51c0602fa9594ae5130f8d90cf529638b834889f46738a0bc2e343aff53e9e5a39c403514a03ce55834df5f6f54e1d51cbab0bdfc73f08e0640e99860ec7fc8e077cd6bbdbead507b9d012f84c7cedb364ac7184fc20d04010deab605d2c59a367c760c60f97836e7b672b3ce7c26e591dfb34333cb23551164f3bc7def1a93", 0xad}, {&(0x7f0000000700)="e02f9f9304fcf7355eac904dc6e2140e49478c0f3359b513128feb35bbf1002eda7fd7d1a37e3f394d2c279813e66479cc1bd2dbeedea3c188337ad9fabab179055bf6e82867462243b08f5cfa8b8707ce715ed37b9550985e753eacf9f537e264d64c9ce061e24ae532bce0f73628af650ea1f455d8bd08010b814884eee21a2a39038322623d740f134beb3d5506a7b32263c87929ae5d453e4d7a1c2fcf83b1b3", 0xa2}], 0x7, &(0x7f0000000840)="c7f0a8870b381836daa03660258a6e4bfa29a7387b752953d3a5fd2fd819b52734443d5fa96d5cdc2717579689d67b3e69e8d5108b6388d30e39e66633cd382ba05a78bbe818235b2104cce4adc4f70ebf9d6d81a6eadca3ffdce723bfa9fc793b8066647179bd81ffa063a4d8b300f5a06429a074f58d400d988a6be346af2468e9c17183fce38286e9c3e702dc486843595c8d25cc17bacc25bdfad442316b302e783bafd441377ee7413b552b05beb19f13d071a0a7bd45b23d6a1d4392c05633f39a51e315cb9aa66eeb576ddfc8b0c8", 0xd2, 0x4090}, 0x40000) r5 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) getpid() syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1452.938369] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1452.962487] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000040)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:48 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x43050000, 0x3, [0x0, 0x2000000000000057]}) 03:52:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80304ff9) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 03:52:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1453.137092] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1453.158155] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1001, 0x11010, 0xffffffffffffffff, 0x4) r1 = userfaultfd(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x301000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000100)={0xffff, "061e0e8c80aae62587ee115a3e24e88c8eedbcf88f18b6f3e58f5c1aa54eb413", 0x3, 0x2, 0xe2d, 0xffff, 0x4}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) mmap(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x1000008, 0x10, r3, 0x8000) 03:52:48 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x60000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:48 executing program 0: prctl$PR_GET_SECCOMP(0x15) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) read(r2, &(0x7f00000001c0)=""/246, 0xf6) socket$netlink(0x10, 0x3, 0xd) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)=0x32) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)={0x4, 0x81, [{0x2, 0x0, 0xffffffff}, {0x52, 0x0, 0x8}, {0x9, 0x0, 0x10001}, {0x5, 0x0, 0x6}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xb5f, 0x2000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:49 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x7ffff000, 0x3, [0x0, 0x2000000000000057]}) 03:52:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000400)=0x5, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) r3 = semget$private(0x0, 0x0, 0x48) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) r5 = getegid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000380)={{0x3, r4, r5, r6, r7, 0x1, 0x7f}, 0x1, 0x200, 0x7605}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000040)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x6000, 0x4000}) 03:52:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:49 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x800e0000, 0x3, [0x0, 0x2000000000000057]}) 03:52:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x3}) 03:52:49 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x80350000, 0x3, [0x0, 0x2000000000000057]}) 03:52:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uinput\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0xee, 0x2) getpeername$llc(r2, &(0x7f0000000840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000880)=0x10) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000980)={0x6, &(0x7f0000000940)=[{0x4, 0x5, 0x67, 0x4}, {0x9, 0x81, 0x1, 0x9}, {0x1f, 0xb9d5, 0x10001, 0x7}, {0x200, 0x8001, 0x2, 0x5}, {0x80000001, 0x4, 0xdc, 0x2}, {0x7fff, 0xffffffffffffffe0, 0x8000, 0xfffffffffffffffd}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) sendmmsg$alg(r3, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="466bb2cb94bd99ed57225a47d4bb9cfffdd4342662ec65d18ed9f66c26f8e927d426b8b7d69b7aed6f2b8f6978e4357cd134e8b741b54ec2ac4c78be220136da3930d72428c40bd9ab7b7e74b7f67f405df7ee4e342e076c49f3cc999fc2e6d5034b8c7a92c305a10dbacdbce578eab303fb3505fe0c221ec4de649eacc9bdb0a647c9ece1520adfedab0ea92579f737cddf5a97a897082474f9eac95bb5ddaa364d273aa500d416f4dc2944c7328b8fee26f401da255bbcdd849e2a3aaf3a2d8e407962bbf5ac4d0c9ffecfac2705d0f507aecc1609a30df19f99ed796c", 0xde}], 0x1, &(0x7f00000000c0)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x60, 0x8000}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="e9351b403b923827bbc1b313bcaa47bfa542b0f90c13abf40320a56f0ba8e9cbaf59f08ed2e7c766061fa126f314dd74ae50f9945fe5b64b57798ba52fac9d966c3c9ba58e3541876e730928c7eadbf12b5da6138410cdb63f9688f6be02bcd2a94be35dd2c1df8cf13fd8dad9b4008714c8ba6a81a806a65040094682672303f4c2bec3ab8764a96eee1934aeb713c3b331a453d196aa", 0x97}, {&(0x7f0000000380)="6a06da50658f094869d54b83f662f0f7ecf1d70ed909659c3624d4526ecd7270eb6183788322384dc9af5ff6b3c595d33da9dcec738fd1799cd8bab2a57f68c2c1f2a8143044ee9a44f48b7ef6cb61b220675f4c0acf9fa082ee4f973e8dca45e3137e53129df7ea942a770a1d0c8c6eeec098874ff011be9d9279972d3d0348dfbede96f1258b1938b1c2bf2bce8a3a62f7af40697512d0b873d6c43e3d6d2a8445d003fe5beb127ff2b76c0aa8", 0xae}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000440)="8d879c23d7527fd37ce87d725723916c4c764d70e8e569f1ec115f26767b623a87ea2903a458b196702f5f500de71b55b6101a87c889e870da719e65b11f2e0347d1e2dc9cfe1cf0d721ecc61ad95172e177d4d491ecd9ff13cd647db6243d7f6e45d75ff4fb36b00ed8d5116ba59bcb6681b1b7f327cdb40e9befa61bdc01c05f5439daee", 0x85}, {&(0x7f0000000500)="b86abdd53700e0c25ec83f656d509c99633a9263ee72b34d02bea55c08336370294fa1b48722084504fe940b41e90763990655cfd4226179b8022b6f688b1dd5c28d2c52ad93d218c8e20df3ebe4646881eb5a924f510642a9dee761647ee19033cc43f9b09c87b1e3f20acdf8f8a363866fa3fe1b712e92851813c7a1fb8f646eb7599612d412e9c19c6b5627e023e3e4b9917ae4ec8b54586bfaa7218757658df6bc2049f4adc910ec335ca918a75fcfaf7a3d05f249a53fef9c21cc33d66b92a5dbbcd84b", 0xc6}, {&(0x7f0000000600)="c40016f6ffaa1a37126089fd6ac83c7777353b95172d3cf79e96889a54a686e28675e014b0c3eed7634fffe40260242a69c62f7cff0a579171e1a556fbe56492dd5d7a6ce2509025f38d15ac911087fd836dbdc6ce81e129bdad2b0712148d9ecca48ad9bb48e21db6071a27deaac9014010d9cebfcc073be72d056c5229e74c7fdb7100f4747efe1a00ce1b5208c3ad58e169162609bde0db49f3881bf6624ef128cf5ad0337e031f9dc62a6cbff8fbf2d78321c0439c5f9610eacc34799c20b969f283186eb118c318a880644c4e4bfde51a067c9459cfdc72006623467507acf8e946bb380dd0ade94c7c04caae77", 0xf0}], 0x6, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x210, 0x200080c0}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001a40)="bffc0394fcb3040669cdd939305fc3d0b9d3383615f9b17abd29c6f31fec4b3e14311744162b6d11c307f80827c4f08e1df7dd49ceb4e17dbe682d9aa54e8c77dad106a8fcb1a178058c22faeed1d07a3be26675ef96f3462827c37eb756bbc2d957f21005f38f8449e98c4de629945394948decaeeadb7997b3c4de843543f957f412cc613c3c84631642e5dbd32ef921989e03f5c77310e6dd974b81a64204948f6caf3c837bda0ef427cc4ba6bebfcb4946e9cced4152512ded1ff22b1cf8521cd247253c8094618f07907d1a7a6f67d9accc37", 0xd5}, {&(0x7f0000001b40)="9f9cd874f0bd342118956942f4081a2192784f7f1eb2f2db1fc19aced181e442f95524ead143786408ef8addfd9c7cf15e053658a15a51db487fc0aca54766fc0b6b694d13d38a52199b404bbe517e0b446298812008a83b76e32d2daca2182c607ebbb8751e382fc68233", 0x6b}, {&(0x7f0000001bc0)="a82faec0256ef773f3609cc404b86cf241a09173b447d692863760481013a78ee21c17a6c7b1aef59cd08715aa6f25354c7f56485370632b530316e701f3dc02d8e8d6ffda104a5e49ea943ff8c87b01bea7e71a67b51f4524452c1dea153dd2fc17bbf6e4d5442bd6199258461341dbb15eeac88082842d3aec29708229184e9bad5bf7a552b50336940654cf98e640e1e8c7946f2da760b2ee2ab60a52633dee8029612ba8777a6220cff6cf2931e73fa5d38b9df38959c58e933278d44a3bb5f130102d00af05888f3ac1e7565106e4d232a74e349c5c654388bca0a8811f5949700f775d525e595b375d6213f1", 0xef}, {&(0x7f0000001cc0)="d2f1599761427e7ad73fc2b03f979dc3b07cba50a29fc3d77512fdfc4d08b427569b0bc5cc0a49b25d9f58016b71f9aa6d6bace5a69a63400a987e260c58089f45de99e69dfa34b0029f5ac09a924710874e507b3554b970faf431d0a7be7f9651049a805ed6d524bc9ae7f4791c79c4330a145687f0bf60289292daab30", 0x7e}, {&(0x7f0000000140)="7f749c2bffedaf7084684b06d060fa47761566ac1981cf81b65c3113f3c7326020d52a87f8fc8d89182030d523c544fe0a7a4a00d65ad486c8baff19d74e", 0x3e}], 0x5, &(0x7f00000009c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}, {0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="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", 0xfa}, {&(0x7f0000001ec0)="09cb4395f1d726d2124ff74fe7e65e0bab161a7ddd15d33441015a0334935d39e9fdc46fe5226160032f7ba4ef4e74bb62dad167e02d0104f5822687ed15b51bb45a11f2fae27ea85067bfcad13e5bb11a089416fad10ee2b0d0b44758cfe6140aa746d516911caa3e8dae5640017d9c2cb97cc1900985606f4ed1c6cd1da31bde138d340a1f118c24da3e5ed563610a373e5b75c1fc6dc00dea56df0c9d017770244992a9655d45f892f02a887c737845c9633c3e9b3d04941140c3bdc5e0652a76e4cdf7854c4e32b8275fb392712d920f65ecce1dc678d2141fdb8f20c964d80593161ccc4b70178be85351f8", 0xee}, {&(0x7f0000002000)="a2cbbc8ff65ef59f2bb47659b8ab58fdb673bd468a50864419844b8928eb3a2c8940dfc1f0c4d64297b74256b8", 0x2d}, {&(0x7f0000002040)="212b8029f697a3b5f75d8b17285b8f9a0ad2eef7dd1fefe91c4fab791213b9ba6c551c67b788d68bbe3d26a1c4638a7a7507bd42b46275588c0dcb777effaa4a15617daf41e99fba8aedfa09e45ded3328d7", 0x52}], 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x2e0, 0x4000000}], 0x4, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000780)='/-ev/input/event#\x00', 0x0, 0x204000) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000008c0)={0x9}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:49 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x81000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x40000) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000280)=0x1, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000002c0)=""/73) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000001c0)={@llc={0x1a, 0x205, 0x2, 0x3b, 0xc57, 0xca, @link_local}, {&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000040), 0x10}, 0xa0) 03:52:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x86ddffff, 0x3, [0x0, 0x2000000000000057]}) 03:52:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x84c1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)='eth1\x00', 0xffffffffffffffff}, 0x30) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x398, 0xc0, 0xc0, 0x0, 0x0, 0xc0, 0x300, 0x300, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@ah={0x30, 'ah\x00', 0x0, {0x3, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4f5b, [0x8, 0x4, 0x100, 0x3, 0x8, 0x7], 0x64f, 0x7}, {0xea0, [0x0, 0x3ff, 0x8, 0x6f, 0x3, 0x8b61], 0x100000001, 0x7fffffff}}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xc521, 0xd, [0x3b, 0x5, 0x2, 0x3a, 0x3, 0x25, 0x37, 0x2d, 0x2c, 0x27, 0x1, 0x8, 0x8, 0x11, 0x37, 0x3f], 0x3, 0x8, 0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x10, &(0x7f00000000c0)='/dev/input/mice\x00', r3}, 0x30) r4 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)=0x2db) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:50 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1454.408103] handle_userfault: 7 callbacks suppressed [ 1454.408109] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1454.472941] CPU: 0 PID: 6356 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #21 [ 1454.480068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.489431] Call Trace: [ 1454.492028] dump_stack+0x1db/0x2d0 [ 1454.495693] ? dump_stack_print_info.cold+0x20/0x20 [ 1454.500725] handle_userfault.cold+0x3d/0x5c [ 1454.505147] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1454.509744] ? print_usage_bug+0xd0/0xd0 [ 1454.513805] ? futex_wait_setup+0x430/0x430 [ 1454.518156] ? print_usage_bug+0xd0/0xd0 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88470000, 0x3, [0x0, 0x2000000000000057]}) [ 1454.522249] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1454.527262] ? add_lock_to_list.isra.0+0x450/0x450 [ 1454.532215] ? __handle_mm_fault+0x4552/0x55a0 [ 1454.536806] ? find_held_lock+0x35/0x120 [ 1454.540870] ? __handle_mm_fault+0x4552/0x55a0 [ 1454.545453] ? lock_acquire+0x1db/0x570 [ 1454.549434] ? kasan_check_read+0x11/0x20 [ 1454.553582] ? do_raw_spin_unlock+0xa0/0x330 [ 1454.558005] ? do_raw_spin_trylock+0x270/0x270 [ 1454.562618] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1454.567758] __handle_mm_fault+0x4563/0x55a0 03:52:50 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1454.572167] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1454.577022] ? check_preemption_disabled+0x48/0x290 [ 1454.582052] ? handle_mm_fault+0x3cc/0xc80 [ 1454.586321] ? lock_downgrade+0x910/0x910 [ 1454.590503] ? kasan_check_read+0x11/0x20 [ 1454.594650] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1454.599928] ? rcu_read_unlock_special+0x380/0x380 [ 1454.604862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1454.610394] ? check_preemption_disabled+0x48/0x290 [ 1454.615428] handle_mm_fault+0x4ec/0xc80 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88480000, 0x3, [0x0, 0x2000000000000057]}) [ 1454.619494] ? __handle_mm_fault+0x55a0/0x55a0 [ 1454.624085] __do_page_fault+0x5da/0xd60 [ 1454.628154] do_page_fault+0xe6/0x7d8 [ 1454.631981] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1454.636905] ? vmalloc_sync_all+0x30/0x30 [ 1454.641052] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1454.646504] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1454.651434] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1454.656446] ? page_fault+0x8/0x30 [ 1454.660012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1454.664863] ? page_fault+0x8/0x30 [ 1454.668419] page_fault+0x1e/0x30 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88640000, 0x3, [0x0, 0x2000000000000057]}) 03:52:50 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1454.671865] RIP: 0033:0x451910 [ 1454.675054] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1454.693979] RSP: 002b:00007fdd790477a8 EFLAGS: 00010202 [ 1454.699342] RAX: 00007fdd79047850 RBX: 0000000000000003 RCX: 000000000000000e [ 1454.706604] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fdd79047850 [ 1454.713912] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88a8ffff, 0x3, [0x0, 0x2000000000000057]}) [ 1454.721188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd790486d4 [ 1454.728448] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1454.805493] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1454.810087] CPU: 1 PID: 6367 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1454.817217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.826587] Call Trace: [ 1454.829199] dump_stack+0x1db/0x2d0 [ 1454.832854] ? dump_stack_print_info.cold+0x20/0x20 [ 1454.837886] handle_userfault.cold+0x3d/0x5c [ 1454.842300] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1454.846890] ? print_usage_bug+0xd0/0xd0 [ 1454.850947] ? futex_wait_setup+0x430/0x430 [ 1454.855279] ? print_usage_bug+0xd0/0xd0 [ 1454.859378] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1454.864389] ? add_lock_to_list.isra.0+0x450/0x450 [ 1454.869326] ? __handle_mm_fault+0x4552/0x55a0 [ 1454.873907] ? find_held_lock+0x35/0x120 [ 1454.877982] ? __handle_mm_fault+0x4552/0x55a0 [ 1454.882561] ? lock_acquire+0x1db/0x570 [ 1454.886556] ? kasan_check_read+0x11/0x20 [ 1454.890705] ? do_raw_spin_unlock+0xa0/0x330 [ 1454.895113] ? do_raw_spin_trylock+0x270/0x270 [ 1454.899694] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1454.904819] __handle_mm_fault+0x4563/0x55a0 [ 1454.909260] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1454.914118] ? check_preemption_disabled+0x48/0x290 [ 1454.919150] ? handle_mm_fault+0x3cc/0xc80 [ 1454.923413] ? lock_downgrade+0x910/0x910 [ 1454.927557] ? kasan_check_read+0x11/0x20 [ 1454.931720] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1454.937012] ? rcu_read_unlock_special+0x380/0x380 [ 1454.941953] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1454.947500] ? check_preemption_disabled+0x48/0x290 [ 1454.952519] handle_mm_fault+0x4ec/0xc80 [ 1454.956597] ? __handle_mm_fault+0x55a0/0x55a0 [ 1454.961217] __do_page_fault+0x5da/0xd60 [ 1454.965315] do_page_fault+0xe6/0x7d8 [ 1454.969114] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1454.974059] ? vmalloc_sync_all+0x30/0x30 [ 1454.978233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1454.983690] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1454.988625] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1454.993662] ? page_fault+0x8/0x30 [ 1454.997217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1455.002076] ? page_fault+0x8/0x30 [ 1455.005620] page_fault+0x1e/0x30 [ 1455.009069] RIP: 0033:0x451910 [ 1455.012276] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1455.031171] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1455.036534] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1455.036542] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1455.036548] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1455.036555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1455.036562] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101000, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x7}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, [0xe05, 0xfffffffffffff001, 0x8, 0x4, 0x400, 0x1, 0x97b2, 0x10001, 0x100, 0x9, 0x47800000, 0x0, 0x3ff, 0xfa9, 0x7d4b7d51]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e20, @local}}, 0x7, 0x8001, 0x4, 0xffffffffffffffc1}, &(0x7f0000000380)=0x98) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f00000000c0)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:50 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88caffff, 0x3, [0x0, 0x2000000000000057]}) 03:52:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80}) 03:52:50 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x89060000, 0x3, [0x0, 0x2000000000000057]}) [ 1455.359234] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1455.363810] CPU: 1 PID: 6417 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1455.370908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1455.380257] Call Trace: [ 1455.382845] dump_stack+0x1db/0x2d0 [ 1455.386486] ? dump_stack_print_info.cold+0x20/0x20 [ 1455.391526] handle_userfault.cold+0x3d/0x5c [ 1455.395941] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1455.400545] ? print_usage_bug+0xd0/0xd0 [ 1455.404602] ? futex_wait_setup+0x430/0x430 [ 1455.408920] ? print_usage_bug+0xd0/0xd0 [ 1455.412978] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1455.417990] ? add_lock_to_list.isra.0+0x450/0x450 [ 1455.422918] ? __handle_mm_fault+0x4552/0x55a0 [ 1455.427520] ? find_held_lock+0x35/0x120 [ 1455.431594] ? __handle_mm_fault+0x4552/0x55a0 [ 1455.436172] ? lock_acquire+0x1db/0x570 [ 1455.440168] ? kasan_check_read+0x11/0x20 [ 1455.444315] ? do_raw_spin_unlock+0xa0/0x330 [ 1455.448722] ? do_raw_spin_trylock+0x270/0x270 [ 1455.453301] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 03:52:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1455.458408] __handle_mm_fault+0x4563/0x55a0 [ 1455.462871] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1455.467712] ? check_preemption_disabled+0x48/0x290 [ 1455.472728] ? handle_mm_fault+0x3cc/0xc80 [ 1455.476989] ? lock_downgrade+0x910/0x910 [ 1455.481145] ? kasan_check_read+0x11/0x20 [ 1455.485287] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1455.490576] ? rcu_read_unlock_special+0x380/0x380 [ 1455.495524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1455.501090] ? check_preemption_disabled+0x48/0x290 [ 1455.506110] handle_mm_fault+0x4ec/0xc80 03:52:51 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1455.510172] ? __handle_mm_fault+0x55a0/0x55a0 [ 1455.514780] __do_page_fault+0x5da/0xd60 [ 1455.518849] do_page_fault+0xe6/0x7d8 [ 1455.522662] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1455.527593] ? vmalloc_sync_all+0x30/0x30 [ 1455.531734] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1455.537210] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1455.542146] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1455.547162] ? page_fault+0x8/0x30 [ 1455.547193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1455.547209] ? page_fault+0x8/0x30 [ 1455.547223] page_fault+0x1e/0x30 [ 1455.547254] RIP: 0033:0x451910 [ 1455.547266] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1455.547272] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1455.547281] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1455.547288] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1455.547298] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1455.565816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1455.619114] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:51 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:51 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xfeffffff, 0x3, [0x0, 0x2000000000000057]}) 03:52:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:51 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000140)) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/59, 0x3b}, &(0x7f00000000c0), 0x6}, 0x20) 03:52:51 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xffffa888, 0x3, [0x0, 0x2000000000000057]}) 03:52:51 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x894c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 03:52:51 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:51 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x80801, 0x3) r1 = dup2(r0, r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000100)) 03:52:51 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xffffca88, 0x3, [0x0, 0x2000000000000057]}) 03:52:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0) 03:52:51 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1456.365506] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 1456.384956] PF_BRIDGE: br_mdb_parse() with invalid attr [ 1456.407258] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 1456.439638] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1456.444599] CPU: 1 PID: 6490 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1456.451720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.459103] PF_BRIDGE: br_mdb_parse() with invalid attr [ 1456.461075] Call Trace: [ 1456.461099] dump_stack+0x1db/0x2d0 [ 1456.461122] ? dump_stack_print_info.cold+0x20/0x20 [ 1456.477662] handle_userfault.cold+0x3d/0x5c [ 1456.482088] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1456.486664] ? print_usage_bug+0xd0/0xd0 [ 1456.490715] ? futex_wait_setup+0x430/0x430 [ 1456.495043] ? print_usage_bug+0xd0/0xd0 [ 1456.499125] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1456.504161] ? add_lock_to_list.isra.0+0x450/0x450 [ 1456.509091] ? __handle_mm_fault+0x4552/0x55a0 [ 1456.513665] ? find_held_lock+0x35/0x120 [ 1456.517733] ? __handle_mm_fault+0x4552/0x55a0 [ 1456.522325] ? lock_acquire+0x1db/0x570 [ 1456.526319] ? kasan_check_read+0x11/0x20 [ 1456.530457] ? do_raw_spin_unlock+0xa0/0x330 [ 1456.534866] ? do_raw_spin_trylock+0x270/0x270 [ 1456.539442] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1456.544545] __handle_mm_fault+0x4563/0x55a0 [ 1456.548967] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1456.553820] ? check_preemption_disabled+0x48/0x290 [ 1456.558827] ? handle_mm_fault+0x3cc/0xc80 [ 1456.563067] ? lock_downgrade+0x910/0x910 [ 1456.567205] ? kasan_check_read+0x11/0x20 [ 1456.571342] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1456.576612] ? rcu_read_unlock_special+0x380/0x380 [ 1456.581537] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1456.587097] ? check_preemption_disabled+0x48/0x290 [ 1456.592117] handle_mm_fault+0x4ec/0xc80 [ 1456.596190] ? __handle_mm_fault+0x55a0/0x55a0 [ 1456.600778] __do_page_fault+0x5da/0xd60 [ 1456.604839] do_page_fault+0xe6/0x7d8 [ 1456.608635] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1456.613578] ? vmalloc_sync_all+0x30/0x30 [ 1456.617717] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1456.623169] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1456.628112] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1456.633124] ? page_fault+0x8/0x30 [ 1456.636658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1456.641516] ? page_fault+0x8/0x30 [ 1456.645048] page_fault+0x1e/0x30 [ 1456.648499] RIP: 0033:0x451910 [ 1456.651682] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1456.670570] RSP: 002b:00007fc4decd57a8 EFLAGS: 00010202 [ 1456.675939] RAX: 00007fc4decd5850 RBX: 0000000000000003 RCX: 000000000000000e [ 1456.683222] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decd5850 [ 1456.690494] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1456.697800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decd66d4 03:52:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:52 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xffffdd86, 0x3, [0x0, 0x2000000000000057]}) [ 1456.705061] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:52 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1456.832946] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1456.844329] CPU: 0 PID: 6488 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1456.851434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.860780] Call Trace: [ 1456.860803] dump_stack+0x1db/0x2d0 [ 1456.860824] ? dump_stack_print_info.cold+0x20/0x20 [ 1456.860855] handle_userfault.cold+0x3d/0x5c [ 1456.876439] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1456.881029] ? print_usage_bug+0xd0/0xd0 [ 1456.885119] ? futex_wait_setup+0x430/0x430 [ 1456.889450] ? print_usage_bug+0xd0/0xd0 [ 1456.893528] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1456.898558] ? add_lock_to_list.isra.0+0x450/0x450 [ 1456.903518] ? __handle_mm_fault+0x4552/0x55a0 [ 1456.908110] ? find_held_lock+0x35/0x120 [ 1456.912189] ? __handle_mm_fault+0x4552/0x55a0 [ 1456.916782] ? lock_acquire+0x1db/0x570 [ 1456.920783] ? kasan_check_read+0x11/0x20 [ 1456.924975] ? do_raw_spin_unlock+0xa0/0x330 [ 1456.929403] ? do_raw_spin_trylock+0x270/0x270 [ 1456.933994] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1456.939129] __handle_mm_fault+0x4563/0x55a0 [ 1456.943555] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1456.948412] ? check_preemption_disabled+0x48/0x290 [ 1456.953419] ? handle_mm_fault+0x3cc/0xc80 [ 1456.957663] ? lock_downgrade+0x910/0x910 [ 1456.961818] ? kasan_check_read+0x11/0x20 [ 1456.965972] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1456.971257] ? rcu_read_unlock_special+0x380/0x380 [ 1456.976224] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1456.981772] ? check_preemption_disabled+0x48/0x290 [ 1456.986783] handle_mm_fault+0x4ec/0xc80 [ 1456.990843] ? __handle_mm_fault+0x55a0/0x55a0 [ 1456.995439] __do_page_fault+0x5da/0xd60 [ 1456.999527] do_page_fault+0xe6/0x7d8 [ 1457.003342] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1457.008270] ? vmalloc_sync_all+0x30/0x30 [ 1457.012417] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1457.017868] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1457.022830] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1457.027842] ? page_fault+0x8/0x30 [ 1457.031382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1457.036217] ? page_fault+0x8/0x30 [ 1457.039743] page_fault+0x1e/0x30 [ 1457.043197] RIP: 0033:0x451910 [ 1457.046374] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1457.065266] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1457.070611] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e 03:52:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000140)='/-ev/input/event#\x00', 0xfff, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000180)={{0x0, 0xffffffffffff0001}, {0xf, 0xe}}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 03:52:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:52 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:52 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xfffff000, 0x3, [0x0, 0x2000000000000057]}) 03:52:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1457.077857] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1457.085105] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1457.092348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1457.099596] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1457.183539] net_ratelimit: 32 callbacks suppressed [ 1457.183548] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:52 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xfffffffe, 0x3, [0x0, 0x2000000000000057]}) [ 1457.228917] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:52 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1457.367156] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1457.433420] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1457.533431] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1457.541635] CPU: 0 PID: 6556 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1457.548761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1457.558151] Call Trace: [ 1457.560754] dump_stack+0x1db/0x2d0 [ 1457.564401] ? dump_stack_print_info.cold+0x20/0x20 [ 1457.569426] handle_userfault.cold+0x3d/0x5c [ 1457.573855] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1457.578437] ? print_usage_bug+0xd0/0xd0 [ 1457.582531] ? futex_wait_setup+0x430/0x430 [ 1457.586881] ? print_usage_bug+0xd0/0xd0 [ 1457.590967] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1457.595982] ? add_lock_to_list.isra.0+0x450/0x450 [ 1457.600934] ? __handle_mm_fault+0x4552/0x55a0 [ 1457.605543] ? find_held_lock+0x35/0x120 [ 1457.609644] ? __handle_mm_fault+0x4552/0x55a0 [ 1457.614226] ? lock_acquire+0x1db/0x570 [ 1457.618201] ? kasan_check_read+0x11/0x20 [ 1457.622344] ? do_raw_spin_unlock+0xa0/0x330 [ 1457.626756] ? do_raw_spin_trylock+0x270/0x270 [ 1457.631338] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1457.636455] __handle_mm_fault+0x4563/0x55a0 [ 1457.640886] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1457.645752] ? check_preemption_disabled+0x48/0x290 [ 1457.650766] ? handle_mm_fault+0x3cc/0xc80 [ 1457.655005] ? lock_downgrade+0x910/0x910 [ 1457.659150] ? kasan_check_read+0x11/0x20 [ 1457.663300] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1457.668588] ? rcu_read_unlock_special+0x380/0x380 [ 1457.673544] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1457.679077] ? check_preemption_disabled+0x48/0x290 [ 1457.684098] handle_mm_fault+0x4ec/0xc80 [ 1457.688163] ? __handle_mm_fault+0x55a0/0x55a0 [ 1457.690884] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1457.692770] __do_page_fault+0x5da/0xd60 [ 1457.692795] do_page_fault+0xe6/0x7d8 [ 1457.692808] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1457.692823] ? vmalloc_sync_all+0x30/0x30 [ 1457.692838] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1457.723330] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1457.728287] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1457.733300] ? page_fault+0x8/0x30 [ 1457.736843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1457.737359] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1457.741682] ? page_fault+0x8/0x30 [ 1457.741712] page_fault+0x1e/0x30 [ 1457.741722] RIP: 0033:0x451910 [ 1457.741736] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1457.741750] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 03:52:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:53 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xf0ff7f00000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:53 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xf0ffffffffffff, 0x3, [0x0, 0x2000000000000057]}) [ 1457.741763] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1457.791512] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1457.798777] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1457.806052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1457.813318] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1457.921771] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1457.962674] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:53 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x100000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x14000}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)={0x1, "8e"}, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1458.243335] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1458.278954] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1458.333388] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1458.338103] CPU: 0 PID: 6605 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1458.345210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.354595] Call Trace: [ 1458.357204] dump_stack+0x1db/0x2d0 [ 1458.361148] ? dump_stack_print_info.cold+0x20/0x20 [ 1458.366251] handle_userfault.cold+0x3d/0x5c [ 1458.370700] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1458.375314] ? print_usage_bug+0xd0/0xd0 [ 1458.379378] ? futex_wait_setup+0x430/0x430 [ 1458.383703] ? print_usage_bug+0xd0/0xd0 [ 1458.387772] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1458.392791] ? add_lock_to_list.isra.0+0x450/0x450 [ 1458.397729] ? __handle_mm_fault+0x4552/0x55a0 [ 1458.402318] ? find_held_lock+0x35/0x120 [ 1458.406383] ? __handle_mm_fault+0x4552/0x55a0 [ 1458.410984] ? lock_acquire+0x1db/0x570 [ 1458.414992] ? kasan_check_read+0x11/0x20 [ 1458.419146] ? do_raw_spin_unlock+0xa0/0x330 [ 1458.423565] ? do_raw_spin_trylock+0x270/0x270 [ 1458.428152] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1458.433263] __handle_mm_fault+0x4563/0x55a0 [ 1458.437691] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1458.442533] ? check_preemption_disabled+0x48/0x290 [ 1458.447551] ? handle_mm_fault+0x3cc/0xc80 [ 1458.451823] ? lock_downgrade+0x910/0x910 [ 1458.455969] ? kasan_check_read+0x11/0x20 [ 1458.460114] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1458.465390] ? rcu_read_unlock_special+0x380/0x380 [ 1458.470320] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1458.475876] ? check_preemption_disabled+0x48/0x290 [ 1458.480945] handle_mm_fault+0x4ec/0xc80 [ 1458.485031] ? __handle_mm_fault+0x55a0/0x55a0 [ 1458.489635] __do_page_fault+0x5da/0xd60 [ 1458.493704] do_page_fault+0xe6/0x7d8 [ 1458.497521] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1458.502466] ? vmalloc_sync_all+0x30/0x30 [ 1458.506637] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1458.512104] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1458.517071] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1458.522137] ? page_fault+0x8/0x30 [ 1458.525691] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1458.530548] ? page_fault+0x8/0x30 [ 1458.534099] page_fault+0x1e/0x30 [ 1458.537547] RIP: 0033:0x451910 [ 1458.540747] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1458.559677] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1458.565028] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1458.572316] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:52:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:54 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x200000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1458.579579] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1458.586859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1458.594152] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:54 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x300000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:54 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x400000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000200)={0x0, 0xfffffffffffffffb, 0xf, 0x8cf, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/51, 0x33}]}, &(0x7f0000000100)="94968e646f652443394dd58e378651", &(0x7f0000000140)=""/61, 0x80000001, 0x10017, 0xffffffffffffffff, &(0x7f00000001c0)}) 03:52:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:54 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x500000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1459.215265] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1459.224596] CPU: 1 PID: 6667 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1459.231709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.241052] Call Trace: [ 1459.243648] dump_stack+0x1db/0x2d0 [ 1459.247278] ? dump_stack_print_info.cold+0x20/0x20 [ 1459.252325] handle_userfault.cold+0x3d/0x5c [ 1459.256765] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1459.261347] ? print_usage_bug+0xd0/0xd0 [ 1459.265416] ? futex_wait_setup+0x430/0x430 [ 1459.269737] ? print_usage_bug+0xd0/0xd0 [ 1459.273796] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1459.278824] ? add_lock_to_list.isra.0+0x450/0x450 [ 1459.283758] ? __handle_mm_fault+0x4552/0x55a0 [ 1459.288365] ? find_held_lock+0x35/0x120 [ 1459.292424] ? __handle_mm_fault+0x4552/0x55a0 [ 1459.297001] ? lock_acquire+0x1db/0x570 [ 1459.300997] ? kasan_check_read+0x11/0x20 [ 1459.305143] ? do_raw_spin_unlock+0xa0/0x330 [ 1459.309560] ? do_raw_spin_trylock+0x270/0x270 [ 1459.314137] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1459.319249] __handle_mm_fault+0x4563/0x55a0 [ 1459.323664] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1459.328513] ? check_preemption_disabled+0x48/0x290 [ 1459.333525] ? handle_mm_fault+0x3cc/0xc80 [ 1459.337773] ? lock_downgrade+0x910/0x910 [ 1459.341936] ? kasan_check_read+0x11/0x20 [ 1459.346081] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1459.351356] ? rcu_read_unlock_special+0x380/0x380 [ 1459.356282] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1459.361833] ? check_preemption_disabled+0x48/0x290 [ 1459.366877] handle_mm_fault+0x4ec/0xc80 [ 1459.370935] ? __handle_mm_fault+0x55a0/0x55a0 [ 1459.375525] __do_page_fault+0x5da/0xd60 [ 1459.379590] do_page_fault+0xe6/0x7d8 [ 1459.383384] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1459.388328] ? vmalloc_sync_all+0x30/0x30 [ 1459.392491] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1459.397939] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1459.402871] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1459.407891] ? page_fault+0x8/0x30 [ 1459.411447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1459.416295] ? page_fault+0x8/0x30 [ 1459.419846] page_fault+0x1e/0x30 [ 1459.423294] RIP: 0033:0x451910 [ 1459.426493] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1459.445401] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1459.450759] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1459.458022] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:52:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x600000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1459.465288] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1459.472553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1459.479833] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x700000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:55 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x7000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x800000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x806000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1459.995351] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1460.006862] CPU: 1 PID: 6711 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1460.013986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.023336] Call Trace: [ 1460.025928] dump_stack+0x1db/0x2d0 [ 1460.029575] ? dump_stack_print_info.cold+0x20/0x20 [ 1460.034623] handle_userfault.cold+0x3d/0x5c [ 1460.039086] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1460.043673] ? print_usage_bug+0xd0/0xd0 [ 1460.047734] ? futex_wait_setup+0x430/0x430 [ 1460.052073] ? print_usage_bug+0xd0/0xd0 [ 1460.056134] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1460.061167] ? add_lock_to_list.isra.0+0x450/0x450 [ 1460.066109] ? __handle_mm_fault+0x4552/0x55a0 [ 1460.070704] ? find_held_lock+0x35/0x120 [ 1460.074812] ? __handle_mm_fault+0x4552/0x55a0 [ 1460.079394] ? lock_acquire+0x1db/0x570 [ 1460.083419] ? kasan_check_read+0x11/0x20 [ 1460.087567] ? do_raw_spin_unlock+0xa0/0x330 [ 1460.091974] ? do_raw_spin_trylock+0x270/0x270 [ 1460.096554] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1460.101663] __handle_mm_fault+0x4563/0x55a0 [ 1460.106080] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1460.110941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1460.115699] ? handle_mm_fault+0x3cc/0xc80 [ 1460.119942] ? lock_downgrade+0x910/0x910 [ 1460.124113] ? kasan_check_read+0x11/0x20 [ 1460.128278] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1460.133577] ? rcu_read_unlock_special+0x380/0x380 [ 1460.138527] handle_mm_fault+0x4ec/0xc80 [ 1460.142605] ? __handle_mm_fault+0x55a0/0x55a0 [ 1460.147197] __do_page_fault+0x5da/0xd60 [ 1460.151288] do_page_fault+0xe6/0x7d8 [ 1460.155109] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1460.160064] ? vmalloc_sync_all+0x30/0x30 [ 1460.164224] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1460.169681] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1460.174616] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1460.179633] ? page_fault+0x8/0x30 [ 1460.183172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1460.188016] ? page_fault+0x8/0x30 [ 1460.191560] page_fault+0x1e/0x30 [ 1460.195009] RIP: 0033:0x451910 [ 1460.198202] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1460.217093] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1460.222460] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1460.229887] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1460.237148] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:52:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1460.244419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1460.251696] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x900000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1460.341463] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1460.360415] CPU: 1 PID: 6722 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1460.367554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.376917] Call Trace: [ 1460.379515] dump_stack+0x1db/0x2d0 [ 1460.383150] ? dump_stack_print_info.cold+0x20/0x20 [ 1460.388205] handle_userfault.cold+0x3d/0x5c [ 1460.392635] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1460.397219] ? print_usage_bug+0xd0/0xd0 [ 1460.401304] ? futex_wait_setup+0x430/0x430 [ 1460.405622] ? print_usage_bug+0xd0/0xd0 [ 1460.409679] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1460.414693] ? add_lock_to_list.isra.0+0x450/0x450 [ 1460.419631] ? __handle_mm_fault+0x4552/0x55a0 [ 1460.424213] ? find_held_lock+0x35/0x120 [ 1460.428279] ? __handle_mm_fault+0x4552/0x55a0 [ 1460.432859] ? lock_acquire+0x1db/0x570 [ 1460.436837] ? kasan_check_read+0x11/0x20 03:52:56 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xb00000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1460.440981] ? do_raw_spin_unlock+0xa0/0x330 [ 1460.445419] ? do_raw_spin_trylock+0x270/0x270 [ 1460.450000] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1460.455124] __handle_mm_fault+0x4563/0x55a0 [ 1460.459549] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1460.464393] ? check_preemption_disabled+0x48/0x290 [ 1460.469410] ? handle_mm_fault+0x3cc/0xc80 [ 1460.473677] ? lock_downgrade+0x910/0x910 [ 1460.477829] ? kasan_check_read+0x11/0x20 [ 1460.481992] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1460.487286] ? rcu_read_unlock_special+0x380/0x380 [ 1460.492227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1460.497794] ? check_preemption_disabled+0x48/0x290 [ 1460.502846] handle_mm_fault+0x4ec/0xc80 [ 1460.506933] ? __handle_mm_fault+0x55a0/0x55a0 [ 1460.511530] __do_page_fault+0x5da/0xd60 [ 1460.515630] do_page_fault+0xe6/0x7d8 [ 1460.519451] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1460.524439] ? vmalloc_sync_all+0x30/0x30 [ 1460.528618] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1460.534083] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1460.539015] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1460.544035] ? page_fault+0x8/0x30 [ 1460.547606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1460.552453] ? page_fault+0x8/0x30 [ 1460.556000] page_fault+0x1e/0x30 [ 1460.559463] RIP: 0033:0x451910 [ 1460.562662] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1460.581561] RSP: 002b:00007fc4decd57a8 EFLAGS: 00010202 [ 1460.586924] RAX: 00007fc4decd5850 RBX: 0000000000000003 RCX: 000000000000000e [ 1460.594192] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decd5850 [ 1460.601451] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1460.608723] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decd66d4 [ 1460.615987] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:56 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xc00000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:56 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xd00000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1460.839258] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1460.843815] CPU: 1 PID: 6767 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1460.850915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.860266] Call Trace: [ 1460.862871] dump_stack+0x1db/0x2d0 [ 1460.866526] ? dump_stack_print_info.cold+0x20/0x20 [ 1460.871574] handle_userfault.cold+0x3d/0x5c [ 1460.876052] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1460.880637] ? print_usage_bug+0xd0/0xd0 [ 1460.884702] ? futex_wait_setup+0x430/0x430 [ 1460.889031] ? print_usage_bug+0xd0/0xd0 [ 1460.893110] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1460.898126] ? add_lock_to_list.isra.0+0x450/0x450 [ 1460.903102] ? __handle_mm_fault+0x4552/0x55a0 [ 1460.907710] ? find_held_lock+0x35/0x120 [ 1460.911784] ? __handle_mm_fault+0x4552/0x55a0 [ 1460.916379] ? lock_acquire+0x1db/0x570 [ 1460.920376] ? kasan_check_read+0x11/0x20 [ 1460.924531] ? do_raw_spin_unlock+0xa0/0x330 [ 1460.928972] ? do_raw_spin_trylock+0x270/0x270 [ 1460.933571] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1460.938684] __handle_mm_fault+0x4563/0x55a0 [ 1460.943111] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1460.947975] ? check_preemption_disabled+0x48/0x290 [ 1460.953028] ? handle_mm_fault+0x3cc/0xc80 [ 1460.957288] ? lock_downgrade+0x910/0x910 [ 1460.961439] ? kasan_check_read+0x11/0x20 [ 1460.965601] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1460.970900] ? rcu_read_unlock_special+0x380/0x380 [ 1460.975850] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1460.981384] ? check_preemption_disabled+0x48/0x290 [ 1460.986408] handle_mm_fault+0x4ec/0xc80 [ 1460.990488] ? __handle_mm_fault+0x55a0/0x55a0 [ 1460.995100] __do_page_fault+0x5da/0xd60 [ 1460.999199] do_page_fault+0xe6/0x7d8 [ 1461.003013] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1461.007991] ? vmalloc_sync_all+0x30/0x30 [ 1461.012147] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1461.017618] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1461.022556] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1461.027576] ? page_fault+0x8/0x30 [ 1461.031122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1461.035969] ? page_fault+0x8/0x30 [ 1461.039517] page_fault+0x1e/0x30 [ 1461.042989] RIP: 0033:0x451910 [ 1461.046185] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1461.065082] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1461.070440] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1461.077726] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1461.085010] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1461.092399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1461.099693] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:56 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x1000000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:56 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x1300000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:56 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x1400000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa0c3, 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x2}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:57 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x2000000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:57 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x2100000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1461.570225] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1461.574786] CPU: 1 PID: 6819 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1461.581900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.591278] Call Trace: [ 1461.593878] dump_stack+0x1db/0x2d0 [ 1461.597519] ? dump_stack_print_info.cold+0x20/0x20 [ 1461.602575] handle_userfault.cold+0x3d/0x5c [ 1461.607005] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1461.611588] ? print_usage_bug+0xd0/0xd0 [ 1461.615665] ? futex_wait_setup+0x430/0x430 [ 1461.620009] ? print_usage_bug+0xd0/0xd0 [ 1461.624084] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1461.629098] ? add_lock_to_list.isra.0+0x450/0x450 [ 1461.634029] ? __handle_mm_fault+0x4552/0x55a0 [ 1461.638605] ? find_held_lock+0x35/0x120 [ 1461.642661] ? __handle_mm_fault+0x4552/0x55a0 [ 1461.647268] ? lock_acquire+0x1db/0x570 [ 1461.651265] ? kasan_check_read+0x11/0x20 [ 1461.655430] ? do_raw_spin_unlock+0xa0/0x330 [ 1461.659836] ? do_raw_spin_trylock+0x270/0x270 [ 1461.664448] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1461.669549] __handle_mm_fault+0x4563/0x55a0 [ 1461.673990] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1461.678844] ? check_preemption_disabled+0x48/0x290 [ 1461.683872] ? handle_mm_fault+0x3cc/0xc80 [ 1461.688118] ? lock_downgrade+0x910/0x910 [ 1461.692290] ? kasan_check_read+0x11/0x20 [ 1461.696442] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1461.701735] ? rcu_read_unlock_special+0x380/0x380 [ 1461.706670] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1461.712213] ? check_preemption_disabled+0x48/0x290 [ 1461.717252] handle_mm_fault+0x4ec/0xc80 [ 1461.721319] ? __handle_mm_fault+0x55a0/0x55a0 [ 1461.725917] __do_page_fault+0x5da/0xd60 [ 1461.730010] do_page_fault+0xe6/0x7d8 [ 1461.733810] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1461.738742] ? vmalloc_sync_all+0x30/0x30 [ 1461.742889] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1461.748347] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1461.753291] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1461.758312] ? page_fault+0x8/0x30 [ 1461.761862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1461.766715] ? page_fault+0x8/0x30 [ 1461.770263] page_fault+0x1e/0x30 [ 1461.773720] RIP: 0033:0x451910 [ 1461.776917] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1461.795829] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1461.801196] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1461.808489] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1461.815757] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1461.823020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1461.830287] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x300}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:57 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x3600000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:57 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x4000002000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1462.053416] FAULT_FLAG_ALLOW_RETRY missing 70 03:52:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xa4ffffff}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1462.086382] CPU: 1 PID: 6841 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1462.093491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.102864] Call Trace: [ 1462.105463] dump_stack+0x1db/0x2d0 [ 1462.109134] ? dump_stack_print_info.cold+0x20/0x20 [ 1462.114194] handle_userfault.cold+0x3d/0x5c [ 1462.118624] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1462.123222] ? print_usage_bug+0xd0/0xd0 [ 1462.127321] ? futex_wait_setup+0x430/0x430 [ 1462.131660] ? print_usage_bug+0xd0/0xd0 [ 1462.135718] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1462.140736] ? add_lock_to_list.isra.0+0x450/0x450 [ 1462.145713] ? __handle_mm_fault+0x4552/0x55a0 [ 1462.150318] ? find_held_lock+0x35/0x120 [ 1462.154380] ? __handle_mm_fault+0x4552/0x55a0 [ 1462.158974] ? lock_acquire+0x1db/0x570 [ 1462.162956] ? kasan_check_read+0x11/0x20 [ 1462.167104] ? do_raw_spin_unlock+0xa0/0x330 [ 1462.171520] ? do_raw_spin_trylock+0x270/0x270 [ 1462.176109] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1462.181220] __handle_mm_fault+0x4563/0x55a0 [ 1462.185663] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1462.190523] ? check_preemption_disabled+0x48/0x290 [ 1462.195543] ? handle_mm_fault+0x3cc/0xc80 [ 1462.199805] ? lock_downgrade+0x910/0x910 [ 1462.203991] ? kasan_check_read+0x11/0x20 [ 1462.208169] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1462.213490] ? rcu_read_unlock_special+0x380/0x380 [ 1462.218431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1462.223964] ? check_preemption_disabled+0x48/0x290 [ 1462.229127] handle_mm_fault+0x4ec/0xc80 03:52:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xffffffa4}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1462.233188] ? __handle_mm_fault+0x55a0/0x55a0 [ 1462.237790] __do_page_fault+0x5da/0xd60 [ 1462.241857] do_page_fault+0xe6/0x7d8 [ 1462.245686] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1462.250635] ? vmalloc_sync_all+0x30/0x30 [ 1462.254795] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1462.260255] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1462.265201] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1462.270215] ? page_fault+0x8/0x30 [ 1462.273772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1462.278609] ? page_fault+0x8/0x30 [ 1462.282168] page_fault+0x1e/0x30 [ 1462.285628] RIP: 0033:0x451910 [ 1462.288830] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1462.307730] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1462.313114] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1462.320375] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1462.327640] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1462.334908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1462.342180] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1462.354362] net_ratelimit: 37 callbacks suppressed [ 1462.354370] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1462.420788] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:58 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x4001000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:58 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x100000000000000}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1462.533879] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1462.557562] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x125000) bind$isdn_base(r3, &(0x7f0000000100)={0x22, 0x9, 0x10000, 0x8cfc, 0x40}, 0x6) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:52:58 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xa4ffffff00000000}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:58 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x4305000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1462.670474] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1462.734620] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1462.743468] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1462.757986] CPU: 0 PID: 6886 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1462.765097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.774436] Call Trace: [ 1462.777031] dump_stack+0x1db/0x2d0 [ 1462.780692] ? dump_stack_print_info.cold+0x20/0x20 [ 1462.785753] handle_userfault.cold+0x3d/0x5c [ 1462.790172] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1462.794758] ? print_usage_bug+0xd0/0xd0 [ 1462.798865] ? futex_wait_setup+0x430/0x430 [ 1462.803214] ? print_usage_bug+0xd0/0xd0 [ 1462.807290] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1462.812301] ? add_lock_to_list.isra.0+0x450/0x450 [ 1462.817230] ? __handle_mm_fault+0x4552/0x55a0 [ 1462.821808] ? find_held_lock+0x35/0x120 [ 1462.821822] ? __handle_mm_fault+0x4552/0x55a0 [ 1462.821835] ? lock_acquire+0x1db/0x570 [ 1462.821854] ? kasan_check_read+0x11/0x20 [ 1462.821866] ? do_raw_spin_unlock+0xa0/0x330 [ 1462.821879] ? do_raw_spin_trylock+0x270/0x270 [ 1462.830510] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1462.830532] __handle_mm_fault+0x4563/0x55a0 [ 1462.830568] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1462.830582] ? check_preemption_disabled+0x48/0x290 [ 1462.830594] ? handle_mm_fault+0x3cc/0xc80 [ 1462.871181] ? lock_downgrade+0x910/0x910 [ 1462.875340] ? kasan_check_read+0x11/0x20 [ 1462.879491] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1462.884770] ? rcu_read_unlock_special+0x380/0x380 [ 1462.889691] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1462.895233] ? check_preemption_disabled+0x48/0x290 [ 1462.900249] handle_mm_fault+0x4ec/0xc80 [ 1462.904310] ? __handle_mm_fault+0x55a0/0x55a0 [ 1462.908926] __do_page_fault+0x5da/0xd60 [ 1462.913009] do_page_fault+0xe6/0x7d8 [ 1462.916837] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1462.921769] ? vmalloc_sync_all+0x30/0x30 [ 1462.925907] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1462.931373] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1462.936295] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1462.941302] ? page_fault+0x8/0x30 [ 1462.944834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1462.949673] ? page_fault+0x8/0x30 [ 1462.953239] page_fault+0x1e/0x30 [ 1462.956719] RIP: 0033:0x451910 [ 1462.959907] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1462.978840] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 03:52:58 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:58 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x6000000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1462.984213] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1462.991494] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1462.998755] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1463.006016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1463.013288] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:52:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x8000000000000005}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1463.340934] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:59 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa, 0xfffffffffffffffc}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1463.402153] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x800e000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1463.579166] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:59 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1463.620334] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:52:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x440003) chmod(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x4}, &(0x7f0000000240)=0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x2f, @remote, 0x4e22, 0x2, 'fo\x00', 0x1, 0x10000, 0x39}, {@multicast2, 0x4e23, 0x12004, 0xfffffffffffffffb, 0x8000, 0x3}}, 0x44) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000013000/0x3000)=nil, 0x3000}) 03:52:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x8035000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:59 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x8100000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x86ddffff00000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:59 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:52:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x8847000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:52:59 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:59 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:52:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x8848000000000000, 0x3, [0x0, 0x2000000000000057]}) [ 1464.568435] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1464.573014] CPU: 0 PID: 6961 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1464.580107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.589457] Call Trace: [ 1464.592037] dump_stack+0x1db/0x2d0 [ 1464.595658] ? dump_stack_print_info.cold+0x20/0x20 [ 1464.600657] handle_userfault.cold+0x3d/0x5c [ 1464.605063] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1464.609661] ? print_usage_bug+0xd0/0xd0 [ 1464.613712] ? futex_wait_setup+0x430/0x430 [ 1464.618011] ? print_usage_bug+0xd0/0xd0 [ 1464.622057] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1464.627099] ? add_lock_to_list.isra.0+0x450/0x450 [ 1464.632031] ? __handle_mm_fault+0x4552/0x55a0 [ 1464.636618] ? find_held_lock+0x35/0x120 [ 1464.640693] ? __handle_mm_fault+0x4552/0x55a0 [ 1464.645275] ? lock_acquire+0x1db/0x570 [ 1464.649267] ? kasan_check_read+0x11/0x20 [ 1464.653436] ? do_raw_spin_unlock+0xa0/0x330 [ 1464.657822] ? do_raw_spin_trylock+0x270/0x270 [ 1464.662379] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1464.667463] __handle_mm_fault+0x4563/0x55a0 [ 1464.671872] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1464.676712] ? check_preemption_disabled+0x48/0x290 [ 1464.681760] ? handle_mm_fault+0x3cc/0xc80 [ 1464.685996] ? lock_downgrade+0x910/0x910 [ 1464.690133] ? kasan_check_read+0x11/0x20 [ 1464.694307] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1464.699598] ? rcu_read_unlock_special+0x380/0x380 [ 1464.704543] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1464.710084] ? check_preemption_disabled+0x48/0x290 [ 1464.715124] handle_mm_fault+0x4ec/0xc80 [ 1464.719170] ? __handle_mm_fault+0x55a0/0x55a0 [ 1464.723727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1464.729259] ? vmacache_update+0x114/0x140 [ 1464.733500] __do_page_fault+0x5da/0xd60 [ 1464.737546] do_page_fault+0xe6/0x7d8 [ 1464.741321] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1464.746240] ? vmalloc_sync_all+0x30/0x30 [ 1464.750376] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1464.755833] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1464.760767] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1464.765765] ? page_fault+0x8/0x30 [ 1464.769304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1464.774144] ? page_fault+0x8/0x30 [ 1464.777676] page_fault+0x1e/0x30 [ 1464.781112] RIP: 0033:0x451910 [ 1464.784351] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1464.803264] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1464.808630] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e 03:53:00 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x8864000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:53:00 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x21) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100), 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1464.815904] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1464.823179] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1464.830440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1464.837703] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:00 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88a8ffff00000000, 0x3, [0x0, 0x2000000000000057]}) 03:53:00 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1464.983201] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1464.990327] CPU: 1 PID: 7016 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1464.997452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.006824] Call Trace: [ 1465.009416] dump_stack+0x1db/0x2d0 [ 1465.013066] ? dump_stack_print_info.cold+0x20/0x20 [ 1465.018126] handle_userfault.cold+0x3d/0x5c [ 1465.022564] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1465.027148] ? print_usage_bug+0xd0/0xd0 [ 1465.031222] ? futex_wait_setup+0x430/0x430 [ 1465.035575] ? print_usage_bug+0xd0/0xd0 [ 1465.039638] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1465.044668] ? add_lock_to_list.isra.0+0x450/0x450 [ 1465.049626] ? __handle_mm_fault+0x4552/0x55a0 [ 1465.054206] ? find_held_lock+0x35/0x120 [ 1465.058296] ? __handle_mm_fault+0x4552/0x55a0 [ 1465.062882] ? lock_acquire+0x1db/0x570 [ 1465.066879] ? kasan_check_read+0x11/0x20 [ 1465.071049] ? do_raw_spin_unlock+0xa0/0x330 [ 1465.075462] ? do_raw_spin_trylock+0x270/0x270 [ 1465.080052] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1465.085161] __handle_mm_fault+0x4563/0x55a0 [ 1465.089587] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1465.094430] ? check_preemption_disabled+0x48/0x290 [ 1465.099443] ? handle_mm_fault+0x3cc/0xc80 [ 1465.103717] ? lock_downgrade+0x910/0x910 [ 1465.107898] ? kasan_check_read+0x11/0x20 [ 1465.112046] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1465.117347] ? rcu_read_unlock_special+0x380/0x380 [ 1465.122280] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1465.127846] ? check_preemption_disabled+0x48/0x290 [ 1465.132899] handle_mm_fault+0x4ec/0xc80 [ 1465.136980] ? __handle_mm_fault+0x55a0/0x55a0 [ 1465.141574] __do_page_fault+0x5da/0xd60 [ 1465.145647] do_page_fault+0xe6/0x7d8 [ 1465.149450] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1465.154419] ? vmalloc_sync_all+0x30/0x30 [ 1465.158608] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1465.164109] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1465.169044] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1465.174064] ? page_fault+0x8/0x30 [ 1465.177619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1465.182468] ? page_fault+0x8/0x30 [ 1465.186032] page_fault+0x1e/0x30 [ 1465.189494] RIP: 0033:0x451910 [ 1465.192703] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1465.211617] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1465.216992] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1465.224262] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:53:00 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x88caffff00000000, 0x3, [0x0, 0x2000000000000057]}) [ 1465.231527] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1465.238807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1465.246071] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:00 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x8906000000000000, 0x3, [0x0, 0x2000000000000057]}) 03:53:00 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1465.426004] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1465.430589] CPU: 1 PID: 7022 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1465.437689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.447076] Call Trace: [ 1465.449668] dump_stack+0x1db/0x2d0 [ 1465.453315] ? dump_stack_print_info.cold+0x20/0x20 [ 1465.458345] handle_userfault.cold+0x3d/0x5c [ 1465.462782] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1465.467390] ? print_usage_bug+0xd0/0xd0 [ 1465.471446] ? futex_wait_setup+0x430/0x430 [ 1465.475765] ? print_usage_bug+0xd0/0xd0 [ 1465.479819] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1465.484832] ? add_lock_to_list.isra.0+0x450/0x450 [ 1465.489795] ? __handle_mm_fault+0x4552/0x55a0 [ 1465.494369] ? find_held_lock+0x35/0x120 [ 1465.498438] ? __handle_mm_fault+0x4552/0x55a0 [ 1465.503015] ? lock_acquire+0x1db/0x570 [ 1465.506995] ? kasan_check_read+0x11/0x20 [ 1465.511149] ? do_raw_spin_unlock+0xa0/0x330 [ 1465.515557] ? do_raw_spin_trylock+0x270/0x270 [ 1465.520154] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1465.525286] __handle_mm_fault+0x4563/0x55a0 [ 1465.529712] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1465.529727] ? check_preemption_disabled+0x48/0x290 [ 1465.529740] ? handle_mm_fault+0x3cc/0xc80 [ 1465.543863] ? lock_downgrade+0x910/0x910 [ 1465.548039] ? kasan_check_read+0x11/0x20 [ 1465.552200] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1465.557500] ? rcu_read_unlock_special+0x380/0x380 [ 1465.562428] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1465.567960] ? check_preemption_disabled+0x48/0x290 [ 1465.572978] handle_mm_fault+0x4ec/0xc80 [ 1465.577056] ? __handle_mm_fault+0x55a0/0x55a0 [ 1465.581674] __do_page_fault+0x5da/0xd60 [ 1465.585744] do_page_fault+0xe6/0x7d8 [ 1465.589543] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1465.594490] ? vmalloc_sync_all+0x30/0x30 [ 1465.598632] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1465.604086] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1465.609012] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1465.614072] ? page_fault+0x8/0x30 [ 1465.617612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1465.622470] ? page_fault+0x8/0x30 [ 1465.626017] page_fault+0x1e/0x30 [ 1465.629475] RIP: 0033:0x451910 [ 1465.632675] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1465.651568] RSP: 002b:00007fc4decd57a8 EFLAGS: 00010202 [ 1465.656943] RAX: 00007fc4decd5850 RBX: 0000000000000003 RCX: 000000000000000e [ 1465.664237] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decd5850 03:53:01 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:01 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xfeffffff00000000, 0x3, [0x0, 0x2000000000000057]}) [ 1465.671521] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1465.678816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decd66d4 [ 1465.686077] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:01 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xfffffffffffff000, 0x3, [0x0, 0x2000000000000057]}) 03:53:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa, 0xfffffffffffffffe}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) getsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:53:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:01 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x1000000, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:01 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0xffffffffffffffff, 0x3, [0x0, 0x2000000000000057]}) 03:53:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f2") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:01 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = userfaultfd(0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) 03:53:01 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x2000000000000057]}) 03:53:01 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0xa4ffffff, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x7, 0x7ff}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x1, 0x20, 0xfffffffffffffff7, 0x9, 0xabdf, 0x6, 0xfff, {r4, @in6={{0xa, 0x4e22, 0xffffffff, @mcast2, 0x8}}, 0x4, 0x80000001, 0x12f00000, 0x1, 0x7f}}, &(0x7f0000000380)=0xb0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) getsockname$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f00000000c0)=0x1c) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:01 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x0, 0x2000000000000057]}) 03:53:01 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0xffffffa4, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1466.199377] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1466.223438] CPU: 1 PID: 7100 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1466.230695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.240056] Call Trace: [ 1466.242662] dump_stack+0x1db/0x2d0 [ 1466.246326] ? dump_stack_print_info.cold+0x20/0x20 [ 1466.251357] handle_userfault.cold+0x3d/0x5c [ 1466.255787] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1466.260366] ? print_usage_bug+0xd0/0xd0 [ 1466.264430] ? futex_wait_setup+0x430/0x430 [ 1466.268752] ? print_usage_bug+0xd0/0xd0 [ 1466.272815] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1466.277831] ? add_lock_to_list.isra.0+0x450/0x450 [ 1466.282782] ? __handle_mm_fault+0x4552/0x55a0 [ 1466.287358] ? find_held_lock+0x35/0x120 [ 1466.291417] ? __handle_mm_fault+0x4552/0x55a0 [ 1466.295998] ? lock_acquire+0x1db/0x570 [ 1466.299978] ? kasan_check_read+0x11/0x20 [ 1466.304143] ? do_raw_spin_unlock+0xa0/0x330 [ 1466.308562] ? do_raw_spin_trylock+0x270/0x270 [ 1466.313154] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1466.318266] __handle_mm_fault+0x4563/0x55a0 [ 1466.322695] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1466.327551] ? check_preemption_disabled+0x48/0x290 [ 1466.332568] ? handle_mm_fault+0x3cc/0xc80 [ 1466.336849] ? lock_downgrade+0x910/0x910 [ 1466.341010] ? kasan_check_read+0x11/0x20 [ 1466.345204] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1466.350492] ? rcu_read_unlock_special+0x380/0x380 [ 1466.355422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1466.361457] ? check_preemption_disabled+0x48/0x290 [ 1466.366507] handle_mm_fault+0x4ec/0xc80 [ 1466.370571] ? __handle_mm_fault+0x55a0/0x55a0 [ 1466.375160] __do_page_fault+0x5da/0xd60 [ 1466.379972] do_page_fault+0xe6/0x7d8 [ 1466.383966] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1466.388896] ? vmalloc_sync_all+0x30/0x30 [ 1466.393050] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1466.398521] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1466.403466] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1466.408514] ? page_fault+0x8/0x30 [ 1466.412056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1466.416942] ? page_fault+0x8/0x30 [ 1466.420521] page_fault+0x1e/0x30 [ 1466.423970] RIP: 0033:0x451910 [ 1466.427171] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1466.446077] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1466.451472] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1466.458774] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1466.466085] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:53:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x6, [0x0, 0x2000000000000057]}) [ 1466.473348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1466.480613] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x8, [0x0, 0x2000000000000057]}) 03:53:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:02 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x100000000000000, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f2") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x9, [0x0, 0x2000000000000057]}) 03:53:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x200000007fffe) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xfffffffffffffffd}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:02 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0xa4ffffff00000000, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x5b, [0x0, 0x2000000000000057]}) 03:53:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) accept$alg(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) fchdir(r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2f8, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff8eca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3fcdc0000000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76e5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x335a38bc}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56024564}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 03:53:02 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x1000000, @loopback={0x0, 0x300}}}}, 0x108) 03:53:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x2, 0x2000000000000057]}) 03:53:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x418000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x700, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)=""/254, 0xfe) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000000c0)={r5}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1467.292565] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1467.300337] CPU: 1 PID: 7170 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1467.307439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.316806] Call Trace: [ 1467.319389] dump_stack+0x1db/0x2d0 [ 1467.323015] ? dump_stack_print_info.cold+0x20/0x20 [ 1467.328047] handle_userfault.cold+0x3d/0x5c [ 1467.332491] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1467.337070] ? print_usage_bug+0xd0/0xd0 [ 1467.341121] ? futex_wait_setup+0x430/0x430 [ 1467.345433] ? print_usage_bug+0xd0/0xd0 [ 1467.349495] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1467.354531] ? add_lock_to_list.isra.0+0x450/0x450 [ 1467.359470] ? __handle_mm_fault+0x4552/0x55a0 [ 1467.364163] ? find_held_lock+0x35/0x120 [ 1467.368259] ? __handle_mm_fault+0x4552/0x55a0 [ 1467.372858] ? lock_acquire+0x1db/0x570 [ 1467.376832] ? kasan_check_read+0x11/0x20 [ 1467.380974] ? do_raw_spin_unlock+0xa0/0x330 [ 1467.385375] ? do_raw_spin_trylock+0x270/0x270 [ 1467.389985] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1467.395111] __handle_mm_fault+0x4563/0x55a0 [ 1467.399589] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1467.404428] ? check_preemption_disabled+0x48/0x290 [ 1467.409475] ? handle_mm_fault+0x3cc/0xc80 [ 1467.413748] ? lock_downgrade+0x910/0x910 [ 1467.417910] ? kasan_check_read+0x11/0x20 [ 1467.422068] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1467.427350] ? rcu_read_unlock_special+0x380/0x380 [ 1467.432290] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1467.437849] ? check_preemption_disabled+0x48/0x290 [ 1467.442880] handle_mm_fault+0x4ec/0xc80 [ 1467.446941] ? __handle_mm_fault+0x55a0/0x55a0 [ 1467.451537] __do_page_fault+0x5da/0xd60 [ 1467.455627] do_page_fault+0xe6/0x7d8 [ 1467.459420] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1467.464341] ? vmalloc_sync_all+0x30/0x30 [ 1467.468505] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1467.473987] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1467.478948] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1467.483964] ? page_fault+0x8/0x30 [ 1467.487521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1467.492363] ? page_fault+0x8/0x30 [ 1467.495900] page_fault+0x1e/0x30 [ 1467.499349] RIP: 0033:0x451910 [ 1467.502556] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1467.521468] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1467.526847] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1467.534107] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:53:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:03 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xa4ffffff, @loopback={0x0, 0x300}}}}, 0x108) [ 1467.541365] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1467.548627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1467.555891] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f2") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:03 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x3, 0x2000000000000057]}) 03:53:03 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xffffffa4, @loopback={0x0, 0x300}}}}, 0x108) [ 1467.644566] net_ratelimit: 38 callbacks suppressed [ 1467.644575] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1467.671985] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1467.686388] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1467.698235] CPU: 1 PID: 7184 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1467.705345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.714692] Call Trace: [ 1467.717301] dump_stack+0x1db/0x2d0 [ 1467.720964] ? dump_stack_print_info.cold+0x20/0x20 [ 1467.726036] handle_userfault.cold+0x3d/0x5c [ 1467.730498] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1467.735078] ? print_usage_bug+0xd0/0xd0 [ 1467.739136] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1467.744324] ? print_usage_bug+0xd0/0xd0 03:53:03 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x100000000000000, @loopback={0x0, 0x300}}}}, 0x108) [ 1467.748404] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1467.753431] ? add_lock_to_list.isra.0+0x450/0x450 [ 1467.758366] ? __handle_mm_fault+0x4552/0x55a0 [ 1467.762945] ? find_held_lock+0x35/0x120 [ 1467.767007] ? __handle_mm_fault+0x4552/0x55a0 [ 1467.771594] ? lock_acquire+0x1db/0x570 [ 1467.775572] ? kasan_check_read+0x11/0x20 [ 1467.779720] ? do_raw_spin_unlock+0xa0/0x330 [ 1467.784161] ? do_raw_spin_trylock+0x270/0x270 [ 1467.788754] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1467.793875] __handle_mm_fault+0x4563/0x55a0 [ 1467.798300] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1467.803140] ? check_preemption_disabled+0x48/0x290 [ 1467.808151] ? handle_mm_fault+0x3cc/0xc80 [ 1467.812400] ? lock_downgrade+0x910/0x910 [ 1467.816557] ? kasan_check_read+0x11/0x20 [ 1467.820716] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1467.826008] ? rcu_read_unlock_special+0x380/0x380 [ 1467.830930] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1467.836476] ? check_preemption_disabled+0x48/0x290 [ 1467.841524] handle_mm_fault+0x4ec/0xc80 03:53:03 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1467.845585] ? __handle_mm_fault+0x55a0/0x55a0 [ 1467.850185] __do_page_fault+0x5da/0xd60 [ 1467.854275] do_page_fault+0xe6/0x7d8 [ 1467.858071] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1467.863008] ? vmalloc_sync_all+0x30/0x30 [ 1467.867157] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1467.872622] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1467.877555] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1467.882571] ? page_fault+0x8/0x30 [ 1467.886117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1467.891010] ? page_fault+0x8/0x30 [ 1467.894557] page_fault+0x1e/0x30 [ 1467.898006] RIP: 0033:0x451910 [ 1467.901214] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1467.920126] RSP: 002b:00007fc4decb47a8 EFLAGS: 00010202 [ 1467.925496] RAX: 00007fc4decb4850 RBX: 0000000000000003 RCX: 000000000000000e [ 1467.932761] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decb4850 [ 1467.940031] RBP: 000000000073c040 R08: 00000000000003ff R09: 0000000000000000 [ 1467.947314] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc4decb56d4 [ 1467.954593] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:03 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xa4ffffff00000000, @loopback={0x0, 0x300}}}}, 0x108) 03:53:03 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4, 0x2000000000000057]}) 03:53:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) r2 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1468.063215] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:03 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x5, 0x2000000000000057]}) [ 1468.118493] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1468.212498] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1468.239516] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1468.255464] CPU: 0 PID: 7220 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1468.262593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.271947] Call Trace: [ 1468.274544] dump_stack+0x1db/0x2d0 [ 1468.278209] ? dump_stack_print_info.cold+0x20/0x20 [ 1468.283267] handle_userfault.cold+0x3d/0x5c [ 1468.287691] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1468.292306] ? print_usage_bug+0xd0/0xd0 [ 1468.296366] ? futex_wait_setup+0x430/0x430 [ 1468.300696] ? print_usage_bug+0xd0/0xd0 [ 1468.304766] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1468.309783] ? add_lock_to_list.isra.0+0x450/0x450 [ 1468.314727] ? __handle_mm_fault+0x4552/0x55a0 [ 1468.319313] ? find_held_lock+0x35/0x120 [ 1468.323393] ? __handle_mm_fault+0x4552/0x55a0 [ 1468.327979] ? lock_acquire+0x1db/0x570 [ 1468.331961] ? kasan_check_read+0x11/0x20 [ 1468.336119] ? do_raw_spin_unlock+0xa0/0x330 [ 1468.340549] ? do_raw_spin_trylock+0x270/0x270 [ 1468.345179] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1468.350343] __handle_mm_fault+0x4563/0x55a0 [ 1468.354771] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1468.359737] ? check_preemption_disabled+0x48/0x290 [ 1468.364764] ? handle_mm_fault+0x3cc/0xc80 [ 1468.369005] ? lock_downgrade+0x910/0x910 [ 1468.373150] ? kasan_check_read+0x11/0x20 [ 1468.377309] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1468.382629] ? rcu_read_unlock_special+0x380/0x380 [ 1468.387572] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1468.393135] ? check_preemption_disabled+0x48/0x290 [ 1468.398151] handle_mm_fault+0x4ec/0xc80 [ 1468.402243] ? __handle_mm_fault+0x55a0/0x55a0 [ 1468.406835] __do_page_fault+0x5da/0xd60 [ 1468.410908] do_page_fault+0xe6/0x7d8 [ 1468.414763] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1468.419694] ? vmalloc_sync_all+0x30/0x30 [ 1468.423840] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1468.429316] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1468.434315] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1468.439339] ? page_fault+0x8/0x30 [ 1468.442888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1468.447740] ? page_fault+0x8/0x30 [ 1468.451303] page_fault+0x1e/0x30 [ 1468.454769] RIP: 0033:0x451910 03:53:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:03 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x1000000, 0x300}}}}, 0x108) [ 1468.457967] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1468.476869] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1468.482239] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1468.489521] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1468.496795] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1468.504062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 03:53:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:04 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0xa4ffffff, 0x300}}}}, 0x108) [ 1468.511320] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1468.527653] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1468.597815] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1468.611162] CPU: 0 PID: 7227 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1468.618272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.627618] Call Trace: [ 1468.630203] dump_stack+0x1db/0x2d0 [ 1468.633834] ? dump_stack_print_info.cold+0x20/0x20 [ 1468.638888] handle_userfault.cold+0x3d/0x5c [ 1468.643313] ? userfaultfd_ioctl+0x54e0/0x54e0 03:53:04 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0xffffffa4, 0x300}}}}, 0x108) 03:53:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1468.647895] ? print_usage_bug+0xd0/0xd0 [ 1468.651962] ? futex_wait_setup+0x430/0x430 [ 1468.656301] ? print_usage_bug+0xd0/0xd0 [ 1468.660361] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1468.665376] ? add_lock_to_list.isra.0+0x450/0x450 [ 1468.665400] ? __handle_mm_fault+0x4552/0x55a0 [ 1468.665413] ? find_held_lock+0x35/0x120 [ 1468.678936] ? __handle_mm_fault+0x4552/0x55a0 [ 1468.683522] ? lock_acquire+0x1db/0x570 [ 1468.683544] ? kasan_check_read+0x11/0x20 [ 1468.683559] ? do_raw_spin_unlock+0xa0/0x330 03:53:04 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x100000000000000, 0x300}}}}, 0x108) [ 1468.696070] ? do_raw_spin_trylock+0x270/0x270 [ 1468.700667] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1468.705783] __handle_mm_fault+0x4563/0x55a0 [ 1468.710202] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1468.715063] ? check_preemption_disabled+0x48/0x290 [ 1468.720118] ? handle_mm_fault+0x3cc/0xc80 [ 1468.724365] ? lock_downgrade+0x910/0x910 [ 1468.728515] ? kasan_check_read+0x11/0x20 [ 1468.732665] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1468.737953] ? rcu_read_unlock_special+0x380/0x380 [ 1468.742929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1468.748502] ? check_preemption_disabled+0x48/0x290 [ 1468.748520] handle_mm_fault+0x4ec/0xc80 [ 1468.748537] ? __handle_mm_fault+0x55a0/0x55a0 [ 1468.748560] __do_page_fault+0x5da/0xd60 [ 1468.762181] do_page_fault+0xe6/0x7d8 [ 1468.762195] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1468.762211] ? vmalloc_sync_all+0x30/0x30 [ 1468.762239] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1468.784592] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1468.789521] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1468.794540] ? page_fault+0x8/0x30 03:53:04 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0xa4ffffff00000000, 0x300}}}}, 0x108) [ 1468.798096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1468.802992] ? page_fault+0x8/0x30 [ 1468.806532] page_fault+0x1e/0x30 [ 1468.809990] RIP: 0033:0x451910 [ 1468.813225] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1468.832129] RSP: 002b:00007fc4decd57a8 EFLAGS: 00010202 [ 1468.832139] RAX: 00007fc4decd5850 RBX: 0000000000000003 RCX: 000000000000000e 03:53:04 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x6, 0x2000000000000057]}) 03:53:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1468.832147] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decd5850 [ 1468.832154] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1468.832161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decd66d4 [ 1468.832168] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1468.975078] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1469.036626] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:04 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}, 0x1000000}}}, 0x108) 03:53:04 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x7, 0x2000000000000057]}) 03:53:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x200200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0xffffffff80000001, 0x7, 0xff, 0x9af5, 0x3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x8, 0x0, 0x4, r3}, 0x10) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1469.299568] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1469.373885] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1469.411857] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1469.420858] CPU: 1 PID: 7295 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1469.427976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.437334] Call Trace: [ 1469.439953] dump_stack+0x1db/0x2d0 [ 1469.443614] ? dump_stack_print_info.cold+0x20/0x20 [ 1469.448644] handle_userfault.cold+0x3d/0x5c [ 1469.453098] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1469.457682] ? print_usage_bug+0xd0/0xd0 [ 1469.461738] ? futex_wait_setup+0x430/0x430 [ 1469.466070] ? print_usage_bug+0xd0/0xd0 [ 1469.470139] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1469.475161] ? add_lock_to_list.isra.0+0x450/0x450 [ 1469.480123] ? __handle_mm_fault+0x4552/0x55a0 [ 1469.484714] ? find_held_lock+0x35/0x120 [ 1469.488786] ? __handle_mm_fault+0x4552/0x55a0 [ 1469.493379] ? lock_acquire+0x1db/0x570 [ 1469.497372] ? kasan_check_read+0x11/0x20 [ 1469.501548] ? do_raw_spin_unlock+0xa0/0x330 [ 1469.505975] ? do_raw_spin_trylock+0x270/0x270 [ 1469.510558] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1469.515668] __handle_mm_fault+0x4563/0x55a0 [ 1469.520109] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1469.524955] ? check_preemption_disabled+0x48/0x290 [ 1469.529991] ? handle_mm_fault+0x3cc/0xc80 [ 1469.534240] ? lock_downgrade+0x910/0x910 [ 1469.538392] ? kasan_check_read+0x11/0x20 [ 1469.542568] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1469.547861] ? rcu_read_unlock_special+0x380/0x380 [ 1469.552796] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1469.558313] ? check_preemption_disabled+0x48/0x290 [ 1469.563311] handle_mm_fault+0x4ec/0xc80 [ 1469.567353] ? __handle_mm_fault+0x55a0/0x55a0 [ 1469.571920] __do_page_fault+0x5da/0xd60 [ 1469.575985] do_page_fault+0xe6/0x7d8 [ 1469.579774] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1469.584683] ? vmalloc_sync_all+0x30/0x30 [ 1469.588827] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1469.594260] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1469.599184] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1469.604212] ? page_fault+0x8/0x30 [ 1469.607804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1469.612628] ? page_fault+0x8/0x30 [ 1469.616170] page_fault+0x1e/0x30 [ 1469.619617] RIP: 0033:0x451910 [ 1469.622807] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1469.641690] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1469.647027] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1469.654271] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1469.661522] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:53:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:05 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}, 0xa4ffffff}}}, 0x108) 03:53:05 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8, 0x2000000000000057]}) 03:53:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f2") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1469.668783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1469.676071] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1469.698730] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1469.703646] CPU: 1 PID: 7295 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1469.710745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.720105] Call Trace: [ 1469.722695] dump_stack+0x1db/0x2d0 [ 1469.726331] ? dump_stack_print_info.cold+0x20/0x20 [ 1469.731357] handle_userfault.cold+0x3d/0x5c [ 1469.735778] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1469.740378] ? print_usage_bug+0xd0/0xd0 [ 1469.744442] ? futex_wait_setup+0x430/0x430 [ 1469.748761] ? print_usage_bug+0xd0/0xd0 [ 1469.752819] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1469.757835] ? add_lock_to_list.isra.0+0x450/0x450 [ 1469.762782] ? __handle_mm_fault+0x4552/0x55a0 [ 1469.767364] ? find_held_lock+0x35/0x120 03:53:05 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}, 0xffffffa4}}}, 0x108) [ 1469.771434] ? __handle_mm_fault+0x4552/0x55a0 [ 1469.776019] ? lock_acquire+0x1db/0x570 [ 1469.776043] ? kasan_check_read+0x11/0x20 [ 1469.776073] ? do_raw_spin_unlock+0xa0/0x330 [ 1469.776089] ? do_raw_spin_trylock+0x270/0x270 [ 1469.776104] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1469.776126] __handle_mm_fault+0x4563/0x55a0 [ 1469.776153] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1469.776167] ? check_preemption_disabled+0x48/0x290 [ 1469.776181] ? handle_mm_fault+0x3cc/0xc80 [ 1469.784303] ? lock_downgrade+0x910/0x910 [ 1469.784316] ? kasan_check_read+0x11/0x20 03:53:05 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}, 0x100000000000000}}}, 0x108) [ 1469.784332] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1469.784348] ? rcu_read_unlock_special+0x380/0x380 [ 1469.784363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1469.784378] ? check_preemption_disabled+0x48/0x290 [ 1469.845820] handle_mm_fault+0x4ec/0xc80 [ 1469.849890] ? __handle_mm_fault+0x55a0/0x55a0 [ 1469.854493] __do_page_fault+0x5da/0xd60 [ 1469.858595] do_page_fault+0xe6/0x7d8 [ 1469.862394] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1469.867332] ? vmalloc_sync_all+0x30/0x30 [ 1469.871523] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1469.877006] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1469.881933] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1469.881950] ? page_fault+0x8/0x30 [ 1469.881967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1469.882000] ? page_fault+0x8/0x30 [ 1469.882015] page_fault+0x1e/0x30 [ 1469.882028] RIP: 0033:0x451910 [ 1469.890556] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d 03:53:05 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x9, 0x2000000000000057]}) [ 1469.890564] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1469.890575] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1469.890583] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1469.890591] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1469.890600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1469.890607] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:05 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xb, 0x2000000000000057]}) 03:53:05 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}, 0xa4ffffff00000000}}}, 0x108) 03:53:05 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xc, 0x2000000000000057]}) 03:53:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f00000000c0)="0adc1f023c123f31421e70a4f080dee70df5452cfbf4af0f84da43e0ea07a46268") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:05 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xd, 0x2000000000000057]}) 03:53:05 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1470.320999] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1470.330454] CPU: 1 PID: 7352 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1470.337574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.346924] Call Trace: [ 1470.349526] dump_stack+0x1db/0x2d0 [ 1470.353171] ? dump_stack_print_info.cold+0x20/0x20 [ 1470.358710] handle_userfault.cold+0x3d/0x5c [ 1470.363134] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1470.367714] ? print_usage_bug+0xd0/0xd0 [ 1470.371770] ? futex_wait_setup+0x430/0x430 [ 1470.376864] ? print_usage_bug+0xd0/0xd0 [ 1470.380956] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1470.385974] ? add_lock_to_list.isra.0+0x450/0x450 [ 1470.390926] ? __handle_mm_fault+0x4552/0x55a0 [ 1470.395508] ? find_held_lock+0x35/0x120 [ 1470.399565] ? __handle_mm_fault+0x4552/0x55a0 [ 1470.404158] ? lock_acquire+0x1db/0x570 [ 1470.408157] ? kasan_check_read+0x11/0x20 [ 1470.412330] ? do_raw_spin_unlock+0xa0/0x330 [ 1470.416752] ? do_raw_spin_trylock+0x270/0x270 [ 1470.421346] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1470.426461] __handle_mm_fault+0x4563/0x55a0 [ 1470.426491] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1470.426505] ? check_preemption_disabled+0x48/0x290 [ 1470.426518] ? handle_mm_fault+0x3cc/0xc80 [ 1470.444963] ? lock_downgrade+0x910/0x910 [ 1470.449176] ? kasan_check_read+0x11/0x20 [ 1470.453321] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1470.458594] ? rcu_read_unlock_special+0x380/0x380 [ 1470.463554] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1470.469103] ? check_preemption_disabled+0x48/0x290 [ 1470.474120] handle_mm_fault+0x4ec/0xc80 [ 1470.478182] ? __handle_mm_fault+0x55a0/0x55a0 [ 1470.482802] __do_page_fault+0x5da/0xd60 [ 1470.486886] do_page_fault+0xe6/0x7d8 [ 1470.490685] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1470.495639] ? vmalloc_sync_all+0x30/0x30 [ 1470.499801] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1470.505255] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1470.510180] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1470.515194] ? page_fault+0x8/0x30 [ 1470.518743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1470.523616] ? page_fault+0x8/0x30 [ 1470.527153] page_fault+0x1e/0x30 [ 1470.530618] RIP: 0033:0x451910 [ 1470.533823] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1470.552718] RSP: 002b:00007fc4decd57a8 EFLAGS: 00010202 [ 1470.558104] RAX: 00007fc4decd5850 RBX: 0000000000000003 RCX: 000000000000000e [ 1470.565362] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decd5850 [ 1470.572648] RBP: 000000000073bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 1470.579907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decd66d4 [ 1470.587161] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:06 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x10, 0x2000000000000057]}) 03:53:06 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:06 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:06 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x13, 0x2000000000000057]}) 03:53:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:06 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x14, 0x2000000000000057]}) 03:53:07 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84800) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000100)={r5, r6}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000140)=""/10) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:07 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:07 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x21, 0x2000000000000057]}) 03:53:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1471.729793] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1471.739953] CPU: 0 PID: 7414 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1471.747090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.756442] Call Trace: [ 1471.759051] dump_stack+0x1db/0x2d0 [ 1471.762686] ? dump_stack_print_info.cold+0x20/0x20 [ 1471.767751] handle_userfault.cold+0x3d/0x5c [ 1471.772188] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1471.776791] ? print_usage_bug+0xd0/0xd0 [ 1471.780865] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1471.786055] ? print_usage_bug+0xd0/0xd0 [ 1471.790126] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1471.795160] ? add_lock_to_list.isra.0+0x450/0x450 [ 1471.800107] ? __handle_mm_fault+0x4552/0x55a0 [ 1471.804697] ? find_held_lock+0x35/0x120 [ 1471.808795] ? __handle_mm_fault+0x4552/0x55a0 [ 1471.813389] ? lock_acquire+0x1db/0x570 [ 1471.817378] ? kasan_check_read+0x11/0x20 [ 1471.821534] ? do_raw_spin_unlock+0xa0/0x330 [ 1471.825941] ? do_raw_spin_trylock+0x270/0x270 [ 1471.830544] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1471.835659] __handle_mm_fault+0x4563/0x55a0 [ 1471.840085] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1471.844938] ? check_preemption_disabled+0x48/0x290 [ 1471.849960] ? handle_mm_fault+0x3cc/0xc80 [ 1471.854207] ? lock_downgrade+0x910/0x910 [ 1471.858366] ? kasan_check_read+0x11/0x20 [ 1471.862521] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1471.867812] ? rcu_read_unlock_special+0x380/0x380 [ 1471.872770] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1471.878325] ? check_preemption_disabled+0x48/0x290 [ 1471.883357] handle_mm_fault+0x4ec/0xc80 [ 1471.887425] ? __handle_mm_fault+0x55a0/0x55a0 [ 1471.892029] __do_page_fault+0x5da/0xd60 [ 1471.896151] do_page_fault+0xe6/0x7d8 [ 1471.899955] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1471.904913] ? vmalloc_sync_all+0x30/0x30 [ 1471.909071] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1471.914526] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1471.919473] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1471.924517] ? page_fault+0x8/0x30 [ 1471.928061] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1471.932926] ? page_fault+0x8/0x30 [ 1471.936495] page_fault+0x1e/0x30 [ 1471.939948] RIP: 0033:0x451910 [ 1471.943152] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1471.962051] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1471.967410] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e 03:53:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:07 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:07 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x36, 0x2000000000000057]}) 03:53:07 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x60, 0x2000000000000057]}) [ 1471.974676] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1471.981949] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1471.989212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1471.996492] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:07 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:07 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xf0, 0x2000000000000057]}) 03:53:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa, 0xfffffffffffffffd}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:07 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:08 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x140, 0x2000000000000057]}) 03:53:08 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:08 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x300, 0x2000000000000057]}) 03:53:08 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000100)='/-ev/input/event#\x00', 0x6, 0x20000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1472.694111] net_ratelimit: 26 callbacks suppressed [ 1472.694119] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d6470") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1472.787542] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:08 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:08 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x500, 0x2000000000000057]}) 03:53:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 03:53:08 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x3) [ 1472.995440] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1473.042403] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1473.056899] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1473.071546] CPU: 0 PID: 7514 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1473.078648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.087992] Call Trace: [ 1473.090586] dump_stack+0x1db/0x2d0 [ 1473.094224] ? dump_stack_print_info.cold+0x20/0x20 [ 1473.099260] handle_userfault.cold+0x3d/0x5c [ 1473.103713] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1473.108317] ? print_usage_bug+0xd0/0xd0 [ 1473.112391] ? futex_wait_setup+0x430/0x430 [ 1473.116712] ? print_usage_bug+0xd0/0xd0 [ 1473.120781] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1473.125843] ? add_lock_to_list.isra.0+0x450/0x450 [ 1473.130806] ? __handle_mm_fault+0x4552/0x55a0 [ 1473.135406] ? find_held_lock+0x35/0x120 03:53:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1473.139465] ? __handle_mm_fault+0x4552/0x55a0 [ 1473.144059] ? lock_acquire+0x1db/0x570 [ 1473.148052] ? kasan_check_read+0x11/0x20 [ 1473.152208] ? do_raw_spin_unlock+0xa0/0x330 [ 1473.156611] ? do_raw_spin_trylock+0x270/0x270 [ 1473.161220] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1473.166330] __handle_mm_fault+0x4563/0x55a0 [ 1473.170755] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1473.175600] ? check_preemption_disabled+0x48/0x290 [ 1473.180633] ? handle_mm_fault+0x3cc/0xc80 [ 1473.184905] ? lock_downgrade+0x910/0x910 [ 1473.189056] ? kasan_check_read+0x11/0x20 03:53:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d6470") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1473.193233] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1473.198543] ? rcu_read_unlock_special+0x380/0x380 [ 1473.203471] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1473.209028] ? check_preemption_disabled+0x48/0x290 [ 1473.214050] handle_mm_fault+0x4ec/0xc80 [ 1473.218111] ? __handle_mm_fault+0x55a0/0x55a0 [ 1473.222706] __do_page_fault+0x5da/0xd60 [ 1473.226785] do_page_fault+0xe6/0x7d8 [ 1473.230596] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1473.235536] ? vmalloc_sync_all+0x30/0x30 [ 1473.239712] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1473.245176] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1473.250141] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1473.255156] ? page_fault+0x8/0x30 [ 1473.258713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1473.263556] ? page_fault+0x8/0x30 [ 1473.267092] page_fault+0x1e/0x30 [ 1473.270573] RIP: 0033:0x451910 [ 1473.273767] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1473.292676] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1473.298035] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1473.305316] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1473.312588] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1473.319896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1473.327188] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:09 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:09 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x107) 03:53:09 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x543, 0x2000000000000057]}) 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:09 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x600, 0x2000000000000057]}) 03:53:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000011000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000000c0)=""/173) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 1473.507798] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1473.532911] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:09 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x20a83108) 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0xffff0000, 0x0, 0x0, 0x0) 03:53:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1473.661420] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:09 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x80, 0xfffffffffffffe00, 0xff, 0x80000000}, 0x53, [0x0, 0x101, 0x0, 0xffffffff, 0x7, 0x3ff, 0x800, 0xdef9, 0xfffffffffffffffd, 0xfff, 0x517a, 0x9, 0x2f, 0x2, 0x4, 0x0, 0x3, 0x800, 0x3, 0x9, 0x7, 0xc0, 0xffffffffffffff28, 0x7, 0x3, 0x6, 0x7, 0x7, 0x81, 0x40, 0x3, 0x5, 0x7, 0x3, 0x10001, 0xffffffffffffffe1, 0xc44, 0x5, 0xc9, 0x7f, 0x7, 0x3, 0xe8b2, 0x9, 0x1f, 0x6, 0x2, 0xffffffff, 0x7, 0x7, 0xffffffffffffffe1, 0x7f, 0xfffffffeffffffff, 0x6, 0x2, 0xb8, 0x2, 0x3f, 0x100000001, 0x2, 0x8, 0x81, 0x10001, 0x1f], [0x100000000, 0xe6d, 0x4, 0x100000001, 0x100000001, 0x2c, 0x0, 0x426a, 0x5, 0x800, 0xef, 0x1a, 0xffffffffffffff80, 0x7fff, 0x1, 0xb4b7, 0x6ce2, 0x8, 0x1, 0x8, 0xcf, 0x5, 0x894, 0x80000001, 0x10000, 0x6f9ffbd5, 0x84, 0x80000000, 0x8, 0x2, 0xf0, 0x1, 0x4, 0x100000001, 0xeb2, 0x0, 0xffff, 0x20, 0x100000001, 0x2000000000000, 0xba82, 0x0, 0x8, 0x9, 0x0, 0xfae1, 0x8001, 0x5, 0x401, 0x9e, 0x5, 0x7fff, 0x9, 0x2006, 0x3, 0x7, 0x6, 0x81, 0x0, 0x8000, 0xffffffffffffff00, 0x100000000, 0x100], [0x10001, 0x80, 0x5, 0x4, 0x800, 0x0, 0x5cfa, 0x8, 0x9, 0xb9, 0x3, 0xfd83, 0x6, 0x6, 0xfffffffffffff000, 0x2, 0xffffffffffffffff, 0x81, 0x5, 0xff, 0x6, 0x400, 0x9, 0x51, 0x8001, 0x4, 0x5, 0x1ff, 0x9, 0x6b4, 0x6, 0x7, 0x1de020fd, 0x5, 0x100000000, 0x8, 0x480, 0x8, 0xac, 0x7, 0x10001, 0x13, 0x5, 0x1f, 0x7ff, 0x1, 0x8000, 0x200, 0x9, 0x81, 0x533e1c69, 0x0, 0x7, 0x920e, 0x1ff, 0x9, 0x7fffffff, 0xcacc, 0x9, 0x2, 0x4, 0x7, 0x4, 0x10001], [0x6, 0x6, 0x4, 0xb1ad, 0x401, 0x6, 0x57d, 0xef, 0xffffffffffffff80, 0x10000, 0x0, 0x5, 0x0, 0xc7d, 0x81, 0x7fff, 0x5, 0x7fffffff, 0x7, 0xffff, 0xabf, 0x7, 0xff, 0x4e16, 0x4, 0x4, 0x1f, 0x20, 0x0, 0xff, 0x6, 0x7, 0x1, 0x7fffffff, 0x0, 0x7fff, 0x8, 0x6, 0x7, 0x87b1, 0x4, 0x9, 0x100000001, 0x7ff, 0x1, 0x7fff, 0x5, 0xacc, 0x6, 0x8, 0xfffffffffffffff7, 0x5, 0x1ff, 0x8, 0x9ba, 0x6, 0x4c47, 0x2, 0x8, 0x10001, 0x7, 0x20, 0x1f, 0xab]}, 0x45c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000880)=0x1e) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x2, @mcast1, 0x4}}, {{0xa, 0x4e23, 0xfffffffffffffffc, @loopback={0x0, 0x300}}}}, 0x2ed214c8d5b7c4f0) [ 1473.721903] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1473.730969] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1473.744694] CPU: 0 PID: 7558 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1473.751818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.761173] Call Trace: [ 1473.763782] dump_stack+0x1db/0x2d0 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) [ 1473.767427] ? dump_stack_print_info.cold+0x20/0x20 [ 1473.772471] handle_userfault.cold+0x3d/0x5c [ 1473.776915] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1473.781516] ? print_usage_bug+0xd0/0xd0 [ 1473.785587] ? futex_wait_setup+0x430/0x430 [ 1473.789932] ? print_usage_bug+0xd0/0xd0 [ 1473.794004] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1473.799028] ? add_lock_to_list.isra.0+0x450/0x450 [ 1473.803995] ? __handle_mm_fault+0x4552/0x55a0 [ 1473.808587] ? find_held_lock+0x35/0x120 [ 1473.812658] ? __handle_mm_fault+0x4552/0x55a0 [ 1473.817256] ? lock_acquire+0x1db/0x570 03:53:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d6470") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0) [ 1473.821248] ? kasan_check_read+0x11/0x20 [ 1473.825412] ? do_raw_spin_unlock+0xa0/0x330 [ 1473.829833] ? do_raw_spin_trylock+0x270/0x270 [ 1473.834432] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1473.839556] __handle_mm_fault+0x4563/0x55a0 [ 1473.843981] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1473.848862] ? check_preemption_disabled+0x48/0x290 [ 1473.853912] ? handle_mm_fault+0x3cc/0xc80 [ 1473.858165] ? lock_downgrade+0x910/0x910 [ 1473.862318] ? kasan_check_read+0x11/0x20 [ 1473.866470] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0xffff000000000000, 0x0, 0x0, 0x0) [ 1473.871768] ? rcu_read_unlock_special+0x380/0x380 [ 1473.876705] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1473.882243] ? check_preemption_disabled+0x48/0x290 [ 1473.887269] handle_mm_fault+0x4ec/0xc80 [ 1473.891335] ? __handle_mm_fault+0x55a0/0x55a0 [ 1473.895928] __do_page_fault+0x5da/0xd60 [ 1473.900016] do_page_fault+0xe6/0x7d8 [ 1473.903817] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1473.908763] ? vmalloc_sync_all+0x30/0x30 [ 1473.912925] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1473.912943] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1473.912974] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1473.912990] ? page_fault+0x8/0x30 [ 1473.913006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1473.923377] ? page_fault+0x8/0x30 [ 1473.923395] page_fault+0x1e/0x30 [ 1473.923406] RIP: 0033:0x451910 [ 1473.923421] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1473.923428] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0xffff0000, 0x0, 0x0) 03:53:09 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x608, 0x2000000000000057]}) [ 1473.923440] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1473.923451] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1473.985774] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1473.993041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1474.000327] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:09 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000a83000)={0x1, {{0xa, 0x4e23, 0x6, @loopback}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}, 0x20000}}}, 0x108) [ 1474.065448] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x80, 0x1) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000280)={0x4, 0x6, [{0x9, 0x0, 0xff}, {0x9}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x2}]}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000300)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x9, 0x4, &(0x7f0000001540)=[{&(0x7f0000000380)="5cad1e3fc9faa0cc3478", 0xa, 0xb4}, {&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000013c0)="ba48b153095787427e9bb418b1dd774d9fa4e81c362756208c852b82a49ede468e7df3af3ff3186bd336c4797792b7d6bfe818e29d06eae25186ab5717b6154b4db6e181108d97939180cc220c9c836b00fe5f13472d3f0aaa95118c1de0c03bcd2a824e8ff5f500352ecd8214ad734f3f75ce0a9d19ac0cbadeef18aad4e489f83b9c", 0x83, 0x1000}, {&(0x7f0000001480)="84ec6e9728b82c48789abdde208cd9b2b55c462e94689ba9504829d53278f8cf5d90d2ee929533f1485fc7543d55e8dc59718b43d68afb8bebac422e87332c181d222dbea4a0edcb6ef4b629d3794b2f862506e4c6eccf279818f550818a90932fe8cf3e3521748f7ef706efd9f10b365ea2646f87c886a2ef9c70e12059a53ad1d437bf348541166f35e2", 0x8b, 0x7}], 0x2080, &(0x7f0000001680)=ANY=[@ANYBLOB='inline_xattr_size=0x0000000000001013,background_gc=on,noinline_xattr,quota,smackfshat=cgroup)ppp1}),defcontext=user_u,dont_appraise,smackfstransmute=ppp0*,fowner>', @ANYRESDEC=r4, @ANYBLOB="2c7063723d3030303030303030303030303030cb30303031342c00"]) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dlm-monitor\x00', 0x20042, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x6, r3}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000200)=0x51abe778e4817213) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x36, 0x4, 0x7ff, "c5e6d3cf6c6f6532aa3bf21a663a4612", "7f6e49b222febf39cd96ba01f7217b6ca925f83036d1121869b9ce4836ceb504fc"}, 0x36, 0x3) sendmsg$nl_netfilter(r3, &(0x7f0000001b40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001800)={0x2dc, 0x11, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {0x3659e3121cf9b5d6, 0x0, 0x3}, [@nested={0x1d8, 0x58, [@typed={0x4, 0x4d}, @generic="19f017e592859d018303abcd817c366b7b476fac3366bf7f2802ac9ae9a02ff6ac34fcaceca4558cf685993aad8b3e1152f4cc04870e", @typed={0x34, 0x4f, @binary="17618b432c307d2c4f3ab6fd21a6a36b70ab4216109bd985fca65c51875167fb6524c2b477c5d0bb4934bd9b9515"}, @generic="3c0491a3e223fcf913c92b65bd7bdc2e6c44274dd52394c6250d8008b05d0287bec5e0ee9f7704411debbd8f4b9c789f377daa817467ad2b11309f9e4d36b2a1b28d45fd3f87263debe7132b342cdaf2a53b47e9e7e505b1b0f1c503da58fe1ec90ca59060069ea85fd48fe4ecbde51cb7033e49fe57d7aefb20c8", @generic="07d56db8fc1680772afdca789755c98e77f4b4df9a198f62f68a5155f3876f646a79f07a12707d32df2f0b36d7e59f9e642920e75d77a15a75a9fb7bf7ca6fc536db7321ccd485bc4adc771029cedc730d4f8816419306051dd3ee61c0c3bfc0e59e9f2a11e51ccdee0d6f945b37f37bdb2aa430842c7fd0bc5a229192d037ecd75e4b2ffdbfcc96824423cbf87e50d75af6a178f269ff87d99d221867fb1e9d26dacb787885e0f5c9ae558dd164359d4efced7b5763eb5a9fc5de8d8b47136320966b920c52e59e10e59a25a1d09c82e4393fa63075e1ccc7b9a4d72dfc508c", @generic="10", @typed={0x8, 0x8d, @uid=r4}]}, @typed={0x8, 0x45, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0xe8, 0x4d, [@generic="981c678e46bd2de443739817bd6df53d6e93286673345809603c8477a105353b82521d580554ea9305649da85c242daf3b216d1a91723609980dbe7b8b169e863ce150fbd6ad554a7bfe7c2872e29457b6b05d44c23c191ddd9976b3a2f5d9d5b584bc96831d50f1b83d16", @typed={0x8, 0x83, @u32=0x2}, @generic="002e990b5af71ca214598c08dd5d7983bd622a4fc2a5ff0080e29d4952af7a857d4cb587660ea5a9020c44036452ae7807a0", @generic="038cf33d715745223015dcaf0ec84559200ad222a1e745a336bbb7a179fe203dd04a1398ddc6db83d03cea772cba477a295e48872891de9907693bc9f29f"]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xfffffffffffffffb, 0x100) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x200) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)=0x1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) [ 1474.105869] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:09 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x689, 0x2000000000000057]}) 03:53:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 03:53:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000040)='/-ev/input/event#\x00', 0x5c, 0x100000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) 03:53:10 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x280000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000001c0)={0xffff, 0x3, 0x3ff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xffffffffff, @loopback={0x0, 0x300}}}}, 0xffffffffffffffdd) 03:53:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x700, 0x2000000000000057]}) 03:53:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0xffff000000000000, 0x0, 0x0) 03:53:10 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x60000, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000300)=0x81) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x40, 0x4) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000180)={0x400000000000000, 0x1, 0x20, 0x3, 0x1b}) 03:53:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) 03:53:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xffff0000) 03:53:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x806, 0x2000000000000057]}) [ 1474.804287] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1474.815048] CPU: 0 PID: 7647 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1474.822152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.831509] Call Trace: [ 1474.834103] dump_stack+0x1db/0x2d0 [ 1474.837769] ? dump_stack_print_info.cold+0x20/0x20 [ 1474.842830] handle_userfault.cold+0x3d/0x5c [ 1474.847300] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1474.851890] ? print_usage_bug+0xd0/0xd0 [ 1474.855946] ? futex_wait_setup+0x430/0x430 [ 1474.860280] ? print_usage_bug+0xd0/0xd0 [ 1474.864361] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1474.869376] ? add_lock_to_list.isra.0+0x450/0x450 [ 1474.874317] ? __handle_mm_fault+0x4552/0x55a0 [ 1474.878898] ? find_held_lock+0x35/0x120 [ 1474.882975] ? __handle_mm_fault+0x4552/0x55a0 [ 1474.887573] ? lock_acquire+0x1db/0x570 [ 1474.891556] ? kasan_check_read+0x11/0x20 [ 1474.895705] ? do_raw_spin_unlock+0xa0/0x330 [ 1474.900127] ? do_raw_spin_trylock+0x270/0x270 [ 1474.904725] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1474.909844] __handle_mm_fault+0x4563/0x55a0 [ 1474.914262] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1474.919103] ? check_preemption_disabled+0x48/0x290 [ 1474.924147] ? handle_mm_fault+0x3cc/0xc80 [ 1474.928399] ? lock_downgrade+0x910/0x910 [ 1474.932548] ? kasan_check_read+0x11/0x20 [ 1474.936709] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1474.942011] ? rcu_read_unlock_special+0x380/0x380 [ 1474.946962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1474.952507] ? check_preemption_disabled+0x48/0x290 [ 1474.957544] handle_mm_fault+0x4ec/0xc80 [ 1474.961611] ? __handle_mm_fault+0x55a0/0x55a0 [ 1474.966221] __do_page_fault+0x5da/0xd60 [ 1474.970295] do_page_fault+0xe6/0x7d8 [ 1474.974092] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1474.979025] ? vmalloc_sync_all+0x30/0x30 [ 1474.983194] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1474.988649] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1474.993582] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1474.998612] ? page_fault+0x8/0x30 03:53:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:10 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000800000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x900, 0x2000000000000057]}) [ 1475.002216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1475.007071] ? page_fault+0x8/0x30 [ 1475.010606] page_fault+0x1e/0x30 [ 1475.014078] RIP: 0033:0x451910 [ 1475.017332] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1475.036245] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1475.041611] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1475.048870] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1475.056135] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1475.063413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1475.070678] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) 03:53:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xb00, 0x2000000000000057]}) 03:53:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48044}, 0x20000010) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0xfffffffffffffffa, 0xffffffffffffff7f, 0x7fff, {0x0, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0xffffffffffffff01}}, 0x101, 0x101, 0x1, 0x7, 0x4}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xc53, 0x2, 0x1ff, 0xdd, r4}, 0xd) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) 03:53:10 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xb0, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc213}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3488}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfd}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffffc0}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x304, {{0xa, 0x4e24, 0x117, @remote, 0xffffffffffffffff}}, 0x1, 0x2, [{{0xa, 0x4e20, 0xffffffffffffff1f, @rand_addr="18a8d4d3dde88cb6b854f8c1c6c9f82f", 0x400}}, {{0xa, 0x4e24, 0xaeea, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x313d}}]}, 0x190) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xc00, 0x2000000000000057]}) 03:53:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000) 03:53:11 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a0000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000000000000000000000000000000000000006cb383730000000000010000000a00000000000000000000e2ffffffffffffff00000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1475.392262] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1475.409873] CPU: 1 PID: 7688 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1475.416989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.426335] Call Trace: [ 1475.428974] dump_stack+0x1db/0x2d0 [ 1475.432669] ? dump_stack_print_info.cold+0x20/0x20 [ 1475.437699] handle_userfault.cold+0x3d/0x5c [ 1475.442165] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1475.446752] ? print_usage_bug+0xd0/0xd0 [ 1475.450839] ? futex_wait_setup+0x430/0x430 [ 1475.455162] ? print_usage_bug+0xd0/0xd0 [ 1475.459268] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1475.464282] ? add_lock_to_list.isra.0+0x450/0x450 [ 1475.469232] ? __handle_mm_fault+0x4552/0x55a0 [ 1475.473828] ? find_held_lock+0x35/0x120 [ 1475.477909] ? __handle_mm_fault+0x4552/0x55a0 [ 1475.482524] ? lock_acquire+0x1db/0x570 [ 1475.486511] ? kasan_check_read+0x11/0x20 [ 1475.490659] ? do_raw_spin_unlock+0xa0/0x330 [ 1475.495079] ? do_raw_spin_trylock+0x270/0x270 [ 1475.499656] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1475.504765] __handle_mm_fault+0x4563/0x55a0 [ 1475.509178] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1475.514035] ? check_preemption_disabled+0x48/0x290 [ 1475.519047] ? handle_mm_fault+0x3cc/0xc80 [ 1475.523343] ? lock_downgrade+0x910/0x910 [ 1475.527494] ? kasan_check_read+0x11/0x20 [ 1475.531647] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1475.536956] ? rcu_read_unlock_special+0x380/0x380 [ 1475.541919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1475.547470] ? check_preemption_disabled+0x48/0x290 [ 1475.552500] handle_mm_fault+0x4ec/0xc80 [ 1475.556561] ? __handle_mm_fault+0x55a0/0x55a0 [ 1475.561163] __do_page_fault+0x5da/0xd60 [ 1475.565227] do_page_fault+0xe6/0x7d8 [ 1475.569028] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1475.573984] ? vmalloc_sync_all+0x30/0x30 [ 1475.578128] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1475.583624] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1475.588570] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1475.593638] ? page_fault+0x8/0x30 [ 1475.597180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1475.602038] ? page_fault+0x8/0x30 [ 1475.605578] page_fault+0x1e/0x30 [ 1475.609029] RIP: 0033:0x451910 [ 1475.612217] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1475.631117] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1475.636473] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1475.643748] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1475.651011] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1475.658300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1475.665560] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:11 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet(0x2, 0x4000000000000002, 0xfffffffffffffffe) accept4(r0, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80, 0x800) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x101000) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:11 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xd00, 0x2000000000000057]}) 03:53:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:11 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x100000000, 0x200) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xa55, @empty, 0x2}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x2}, &(0x7f0000000400)=0x8) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffffffffffd}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000085873a3c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x600002, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000180)={0x9b8, 0x0, 0x201d, 0x4a, 0x8, 0x1}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000002340)=[{&(0x7f0000000000)="af4ac6fed43d05ee906a0dbe3c61fadcbe201b7789c4854dc4712150a5d5d4cfe575fc8fb75bea2d8636e260804e80e6e92ea8025363b08194e4de68a0c212b26a8e33bfffcb7e30d94b42a309f8ccc34b894ecc148a6fb1d1135fc7a83110e03fb922dea104bb872cbe88da22fc8dd0e038", 0x72}, {&(0x7f0000000080)="2e6a66f34dbfd9779e1c396eab9321a51a73d1d3aa7044633c4c026f5c7d9d3a84f50df680fecb9998e10a4a9079b8c8f9d8f21d345b0af15b8d5614a947da59f5cafe743bf5418063543f2e8676e19a0cb4c630a82addffe42201be686193a3c0d11c1848df689ef338b1271c630c27418d1460a4512f6e357699d2ab0bb01a919e2fc456cbeee51e3130777a627636f31900e9c55734c67085ce5b684380d1a450c9cd2853a41b4ae693a7531ebdda293721dfc53461535d6c01de8f8a", 0xbe}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="5f21006dd5efd496f5b450169acfd1a5138ce90c83c68f94f5b5fbf2962ac91034c17f30e6bba944ef2f6382b01e0c77ecd332b45c5bf8a2caca4ee28d61f8fc3c0e7eaf957c77c0389fd533236cd8c8b7dc1500a3d8292063ef0fffd8df7175f534358c5961d1a7b675cfd9c5f99371d751551acf8b70772c73a3507b19f3f062ad19da34abf5830062c62dc50a151ecdd677c734a403003c871a3c5b14a4e5b475e54a5c6463fc26df4ff23ea4d7121e2a5c680a7a867da249ad1b41b7ca16a30654d91225fc5533bd7b45637ea688039571f5a38220f6f9a717788ba40e79e7093f23ec47422214", 0xe9}, {&(0x7f0000001240)="d6b75bba97f82f100a740d2f87d52809d1568eee38fe0adff109eb4e8bc8dc8c0976a38d7c1a26d9443ea5a3f91c264019331115764e75bfdd3bb8908c84c04a1ac0bc74e817de68abfc4952e58af3200a51a3942632f38dc94938c7d460846e88ec6e8846857ffd3847a1028161b02298579a13bc96000452364f5aa832cc4365603a18b0c070f4b67f4cb2412e13814c7fbd4a6bfd236dc6ad4642aaef0f94f8f0f2c20cad16e41dfba6bec1201a9619e194c2d74765d968154c032d75e68b05e2eca113f2a873662ae0da00930d", 0xcf}, {&(0x7f0000001340)="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", 0x1000}], 0x6) syz_open_dev$admmidi(&(0x7f00000023c0)='/dev/admmidi#\x00', 0xf71e, 0x101000) 03:53:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) write$P9_RMKDIR(r1, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x40, 0x3, 0x6}}, 0x14) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0)=0x55, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x9, 0x200) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000000c0)={0x11, 0x400}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:11 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xe80, 0x2000000000000057]}) 03:53:11 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x370842e16bd53d96, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1475.992267] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1475.997347] CPU: 1 PID: 7723 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1476.004459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.013809] Call Trace: [ 1476.016397] dump_stack+0x1db/0x2d0 [ 1476.020044] ? dump_stack_print_info.cold+0x20/0x20 [ 1476.025093] handle_userfault.cold+0x3d/0x5c [ 1476.029565] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1476.034145] ? print_usage_bug+0xd0/0xd0 [ 1476.038202] ? futex_wait_setup+0x430/0x430 [ 1476.042533] ? print_usage_bug+0xd0/0xd0 [ 1476.046614] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1476.051626] ? add_lock_to_list.isra.0+0x450/0x450 [ 1476.056564] ? __handle_mm_fault+0x4552/0x55a0 [ 1476.061157] ? find_held_lock+0x35/0x120 [ 1476.065214] ? __handle_mm_fault+0x4552/0x55a0 [ 1476.069793] ? lock_acquire+0x1db/0x570 [ 1476.073781] ? kasan_check_read+0x11/0x20 [ 1476.077941] ? do_raw_spin_unlock+0xa0/0x330 [ 1476.082353] ? do_raw_spin_trylock+0x270/0x270 [ 1476.086933] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1476.092056] __handle_mm_fault+0x4563/0x55a0 [ 1476.096469] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1476.101341] ? check_preemption_disabled+0x48/0x290 [ 1476.106366] ? handle_mm_fault+0x3cc/0xc80 [ 1476.110621] ? lock_downgrade+0x910/0x910 [ 1476.114772] ? kasan_check_read+0x11/0x20 [ 1476.118933] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1476.124264] ? rcu_read_unlock_special+0x380/0x380 [ 1476.129197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1476.134733] ? check_preemption_disabled+0x48/0x290 [ 1476.139765] handle_mm_fault+0x4ec/0xc80 [ 1476.143864] ? __handle_mm_fault+0x55a0/0x55a0 [ 1476.148472] __do_page_fault+0x5da/0xd60 [ 1476.152563] do_page_fault+0xe6/0x7d8 [ 1476.156360] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1476.161287] ? vmalloc_sync_all+0x30/0x30 [ 1476.165446] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1476.170922] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1476.175867] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1476.180895] ? page_fault+0x8/0x30 [ 1476.184432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1476.189306] ? page_fault+0x8/0x30 [ 1476.192861] page_fault+0x1e/0x30 [ 1476.196311] RIP: 0033:0x451910 [ 1476.199507] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1476.218404] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1476.223760] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1476.231026] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:53:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 1476.238299] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1476.245562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1476.252831] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:11 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x80000000004, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedb) 03:53:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0xf, 0x3ff, 0x6, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}) 03:53:12 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1300, 0x2000000000000057]}) 03:53:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:12 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0xfffffffffffffffd, @mcast1}}, {{0xa, 0x0, 0x4, @loopback={0x0, 0x300}}}}, 0x108) [ 1476.485575] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1476.502332] CPU: 0 PID: 7751 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1476.509438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.518785] Call Trace: [ 1476.521399] dump_stack+0x1db/0x2d0 [ 1476.525029] ? dump_stack_print_info.cold+0x20/0x20 [ 1476.530068] handle_userfault.cold+0x3d/0x5c 03:53:12 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1400, 0x2000000000000057]}) [ 1476.534531] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1476.539118] ? print_usage_bug+0xd0/0xd0 [ 1476.543196] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1476.548397] ? print_usage_bug+0xd0/0xd0 [ 1476.552476] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1476.557525] ? add_lock_to_list.isra.0+0x450/0x450 [ 1476.562467] ? __handle_mm_fault+0x4552/0x55a0 [ 1476.567079] ? find_held_lock+0x35/0x120 [ 1476.571138] ? __handle_mm_fault+0x4552/0x55a0 [ 1476.575735] ? lock_acquire+0x1db/0x570 [ 1476.579732] ? kasan_check_read+0x11/0x20 [ 1476.583889] ? do_raw_spin_unlock+0xa0/0x330 [ 1476.588297] ? do_raw_spin_trylock+0x270/0x270 [ 1476.592878] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1476.598017] __handle_mm_fault+0x4563/0x55a0 [ 1476.602431] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1476.607277] ? check_preemption_disabled+0x48/0x290 [ 1476.612311] ? handle_mm_fault+0x3cc/0xc80 [ 1476.616558] ? lock_downgrade+0x910/0x910 [ 1476.620706] ? kasan_check_read+0x11/0x20 [ 1476.624882] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1476.630182] ? rcu_read_unlock_special+0x380/0x380 [ 1476.635147] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1476.640685] ? check_preemption_disabled+0x48/0x290 [ 1476.645706] handle_mm_fault+0x4ec/0xc80 [ 1476.645725] ? __handle_mm_fault+0x55a0/0x55a0 [ 1476.645757] __do_page_fault+0x5da/0xd60 [ 1476.645781] do_page_fault+0xe6/0x7d8 [ 1476.654392] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1476.654409] ? vmalloc_sync_all+0x30/0x30 [ 1476.654424] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1476.676744] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1476.681683] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1476.686730] ? page_fault+0x8/0x30 [ 1476.690305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1476.695185] ? page_fault+0x8/0x30 [ 1476.698726] page_fault+0x1e/0x30 [ 1476.702185] RIP: 0033:0x451910 [ 1476.705379] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1476.725061] RSP: 002b:00007fc4decb47a8 EFLAGS: 00010202 [ 1476.730433] RAX: 00007fc4decb4850 RBX: 0000000000000003 RCX: 000000000000000e [ 1476.737700] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decb4850 [ 1476.744968] RBP: 000000000073c040 R08: 00000000000003ff R09: 0000000000000000 [ 1476.752229] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc4decb56d4 [ 1476.759503] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x800000008, 0x7fb) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x82010, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f00000002c0)=0xffffffffffffff6e) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x0, 0x2}, 0x10) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:12 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x2000, 0x2000000000000057]}) 03:53:12 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x7fffffffffffffd, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@hopopts={0x16, 0x13, [], [@generic={0x200, 0x27, "81085e5bbe661baa864a7041aec84a36ea5a926437eb8833e0e1ac56afa25d8a8f5edccf1a2573"}, @ra={0x5, 0x2, 0x6}, @generic={0x7fff, 0x53, "310e6103c8f7f742cbb9dc88a806bd4d07db9b8aba0de68a82a33e467aaa885541dbe4ca04eb4df195acd2db4ddc0a5e98a8144ec75a8cf37d2c402463e110f84b23a2e8aa69fdb3d87ea1172568efe3d24c21"}, @pad1, @hao={0xc9, 0x10, @rand_addr="7ef7b6d94829d23308e48067820633c6"}, @pad1]}, 0xa8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x100, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000300)={{0xf31, 0x592b9e20, 0x93, 0x7, 0x2, 0x20}, 0x3}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x1ff, 0x80000001, 0x7, 0x8000, 0x3, 0x3, 0x400, 0x44, 0x40, 0x1bc, 0x80000000, 0x30ba950a, 0x38, 0x1, 0x8, 0x3}, [{0x4, 0x3, 0x100000000, 0x4, 0x4, 0x1, 0x4, 0x5}, {0x0, 0x0, 0x200, 0x80000000, 0x100, 0x9, 0x4, 0x639f}], "b2ee64954ddf99f53de1b03b1b29a6a2c31369114457b8120092dbf853eb046d4dcb374942a41bc4e1bc6c2d26bfc87dcb319e6e173f95991004aceb1d28203831d7ed8615aea2c7b435e028922dff6be7c71565818bce86dae05e5434866684b7fd3877f3198c52e61b3da5c23cb2514954b4aa55c3"}, 0x126) 03:53:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:12 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x2100, 0x2000000000000057]}) 03:53:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 03:53:12 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="2612a16636ecfbc3bcd6570b9b3bf0bf9ce2984c66c19f5f9f25d4eaa0079a2b9f2a2a1236488ad0bd8b4932bef10f4ab1d75d5323ad943b876b69219a253a394973f211534e09e0729a7310a224aba369b562ab0bdf218ddf9f9c5f954778193ccdc3d4baf8c1e533360d9557b420b63dc0bbd127a7aa991f828f7775f28d166b4b07bc757442df15ceb00e518073cfe079714c2311da092cf9fa6ac194182ec871b49cf6ec0c225dc5f4a272cba14724dc3488e868c9f0698f92b056b2b96f6ad2f075313127ac07f32a6c8f05f788ca378bd07ce2cf9d943eb24a4a3a8a6f280b70e7f6b3e94bcd3e76f4cc5f3b0f7a830dfd17fd5bf93219a26187ce747e7ae0541676e988a622d7d4e4336c47f5ff04d9823a279b93babcc05d71a0c99edba89f501f9b1386611b8865b1ac98941fcf20d8d59fd3aa432b44956404893f05de0f1921bc1c048430a98f8f2f8ad6e995f5474d8c69ec54b281843d31b4ca43eaa24c956a327ddb5c2c2ea2e1103a9f6af8fac2d6a9bd33f6546776681c5da215fb747b96d48d643a97f5bf00fcc2b8a5b7eb5ae948033a37e4d08f93d9928cc35713ee1282b658a26382f37844a2015047b6192fd722f74fdc8b99d50def24cf64ec3a2e99f16112a3d950520d297121daf9327f187fc3690275fda804e40769c4882e62eb1e3d57583c7f87df70f2eaa41d7b99879920722c19f04b4589a31e7de16adc5537dfba2978ba40fb246d2deadf46db2f90834576bd6e9b3bf0cdd92ffb8c9f3cffa18443c16fcf6e5c92585d5142f057516599a1f8239f85ccec72341b9e9e33b3c1814ab0469a8327755fc1d37f01c8c4ba30c33c6775b7b0e98afb2b33494f25c2abbe1dbf2df151acdb37080e34cad1a3af47cc353d0cb065ca7c2f424da766487c28135885b3ce35ff691e210fd25cf9ce5c311bfa394535abb70a3963caba9dad4886f53a364347ee6e62f3109f6156f501f9c96c92816fc42401aeda150b5805e5333fba8b4aafe0a18c94e4c8b974f08918cbdd69787479dd4f6e755e2e4e737854f67177e55e79b6e79a086b171837c219d098b6a7e1a7879b0a87bce45e15159ee491936a66d7a7664933cdbec7726a802a73af65f65da31c106e873783aeb205c36523062859aaacde5b3cd13d54ce8efcfa3f9668024053042c3c258fdb8d6d575eae004ff9704b19f99765cd64e2d27ebb19fd08c97538bd07a8ea9c8f15f6a9ae6ab7b5c20d3653cfdc0ae1820930bd88cbcdf94c2c56a422ba2bed2c14f979ced12c8085a251ce16f8ea918d128d17e2c5b9ac45198ada3d14568ca35deb61a5d123da2af20496a34f1f6d1f3285b8a904792dea3b04cd258e7abe8223a4dbdaa631ec67bee7d858984801ad6c5b9b5c172d60ab541c2368722cf40be54918c7a0211e2b643839b6799866324407e7cf0404a8b58ca5f91cbfc4b97cbab691153ab7f8285da0cbe2aab4343aa0af73f281b73acac3e194e3252ed06a4bbbd3379c2187d157d59c29ed4ba08523afadc84a2b6fece1d80fca7a7a2895914e15db6a31800d20bbed8cc55c98bbf47db99de8511eccdbda286e317720f7dd9d1379df862bf2a9bc13ec972b30124d8391e49f3791e5be9ad590ce7e8e254479002ce55d25569e6f47fb7320c48e243899ff9abe9fb4a141f001c9ba6cdc3d58289a0a3a186e18988ca302ce874fdfc4601856baadd656264de6c811ca2b3df1b3a9fab15565f24a3997f73129064f59e1e88b0bfb689701357fbee0c42ac0c5e14e2a4d2dc9c9762cf5c46cfa503d0044520cd5ccd5359e9c04711646aeb839421e134cf216187fb5997e15b9bb7584222397a97b1d2a0b7be0ed03b91a6ee069fe3d3198db5757c65c9d9a1e5a8317993cb0119b6420c64afa573bbf19da192125ada8a526d47ce17ae292b2ebaf61e6cb824cd907a82a43a9712471ad5ad90f4c074e29c632250ef52cf8e98b770711c2dfd6e4ce0fba2a9b231bd9e31810e9b5eac7903b919cf612610bd35db340733fc24e6066a9a39b832103fb52fc7c9747ffe9b80f00ba3b8867971e4fafbc14419812048ea7d6a0348d9e5d9c458873cad00b7cbb0caaf52af0aa94d45cfb7a7f76f4fe82bb966df3c3e45d3effc927b2140b919eba65172d69506dd6b8d8a7a707d6924654a4b4414c500f583c9ea61575e700bedacc41eb23de36783471e3469840362e1be5a543133c98dd5f515ec95583103a0402641328efb02675093c812c9edcecf87ac0388991a504a49bde395ecf3cff9c5a7cc393bd6e0420c1e92529555e31cbce98a03f9c0e6ca1407720827b7536a8740ced5ea55f125dcecc90044119eda7c7093324fd6234464a3faee366a83ca3abe318e7c4a0fd92c5d933e15ab47213a166708c8aa164abc91bde71435b8021972f61e0b9bff0cfb61a7f991eb694e928286cff878efbecc235f4c8c305ad4abbc23860beb1ab1fd76d120261f03b56e13ac3a97fcfd84d5c2760dd9c4a9cf10392e1148773827798c8c171b3c032dfab67e1e7d62cab2fe072b2e12045abdfe047b60fd3a0ee1c9cb7fcd023bd57e428b30afdee0a746ae81adef8eea52879547c9c753d42e7364039e9d451eca73c398122f4ed1971eb565867cf5967a563256f84a484e1e204e8eeeb0e2aa5729e395eeddada6c273d62dffc711c6c76b1816716b5f85784f0c3640fc9fe989f422354faf117bfcdf3c7cd09c19c1d70456d24a6cd4358e54bdf87f0bf7ecbc802eea63b54a6dd7a17b4eb86dc868188eef41c48033e7550c691959e2a4a4b04ab6540a086526719cadf0321cec3e4e9b9f81e5564e9120603fd8515caad9115677556e6533aa1c9bb098d58da929c82d74cf49ccf7cdc8218c19be9af3d02f4408d87b3e410da6fff0ee0c7ab29c2c0ed1a34cf780625dc6743220bc5e6aeed817f14d5556d6fe6778f6787084ddec902da53a4b492c2666fe46791d2f67061bfe6483f81d37c42b15df34ef466efa70d5366eb7261c4d14993fd603e619fbc4a1766bbd5b4dc1d81abfd63d30fe97f3fe02581cb1152a09821a9783da74b875b57c47b534dd5b7d64f8cb992da389ca2a6377de9a13e35d73048f9a79d8915ea05a6ae377347fd812a18e5bffb7e68227fb239f8c2aafe3c01d914dc3ab84c5686955be512ab16913db21819a080f378b8529f46e564c4e796700763e7b08bb1c22c4353c71e595042ab687b72ea35c04b8d3daaf437348f943c6eb38e04b0243ebd802671e0884c34a00d2c0abd248b70ef686da300a925198e7ae662beace9158734560702119e9d37eaceca94f9a843b7749306188fbde5a269e9f98835ab3c9dfc23836a10c29645442e1d93626551c75cc7f456f3db791f6502b499cf5275354ec19f0df4b2bc45df81830c7f9c91ce768f75a2f9ba38a8ce869066cea8f2ea236fd685bc89b2ffa266e3d0c4dcd8f33ab995350bf81038610a7f8274d624c92b6a0313298c309717520f43ec3a5a8a4b3319564be56f162710646e1da1816c8d1365e9e8611cfe4a3149b169cebe9d4a533c979bd9f64c7b16b13fc317ccb243b706b3588bb4a031a48057f5f9d569fa86acad6a39d8336be7473bed236786e1e4886f4fe87a1b19f53417f3a44087c0bf9bc1a61ae1d3ca57780f6989cc1075bad5bdcb89283b5c3dca4b77a4086beb1d690d050f24b202985fe0fb6eff290baf35cfd4984a3d7cfb857c5f819fd86d79ff0683d25e80f4823011d4efed05ac6ca1645502bc41cb8fc57586ea8644ae54e67b7438d4c70bc62f708dfeb16723e4fe5b1a8921c0b01b655968a8fb969fb5323cf5a1f044d299d7458fab2418750d35d8e669ec5e2dc8fa268fc83d0f3b8d2fd55cbd8a91d579f2cc8d03a0165fff1037d7f7e3d2e936f9e4aefdc602389e660681090b943cf27cd10cc19239f19829f36deb66afdf564f4ee2694e4a9be5f53b8b88d4ae48cf2d9542fba084a06dcda92e9452bdf26766af5e6cd6a07fa48e87ab50c18ff753ad816e79399b6cd36ab153e4ccf9ec6bd86b8721dc6b575b1f9aa562f9309e43ee56fc3ad04bbfb33bc35e48ba8d2e758295a146fc3cd4ffe66a5e69d4b9f10b0035a09e3e20ffde5a8753b8726badff40559d44de5573506d4b8a6f9036272d4d725f9c71ba9ab556f81a1270bf96d65a2919d1b626fb2afc8d19002b8ba9aaa39a05a546f7ba232042fe8ce73572ef2d39abe17380e0696329b35f895161e261c97904fe8bd1db9a238719036912598571681fd216a5d5a209f1109fb1597a9dc88da0e8e9710e24238f3409adfb1fc241ade5b4cdf287cd35eb7d24c8ba5fd8c424063279b49ef81ec7bb1fec0058131ad09d85ecb7b9c4198e9eab7acd57d58350dfd963b4e48e76e9c74f0cc04104174f2c1784efa96a068b493148109eaa9b8254d320225d0e77265a022bd41e9be450d2a3cad26b60a5fc367b257475b16fb908ccde205d6e3652d984eeae2523f3dae025ffe09a9f01a2358b3dc2250ea9df6a55540f480e39d5b2abec74f278c51767085cd804c35c073ec47357f6b6559818fbc1d530f9d125643ea8862f26031ba57eb371b92aa3155c0ddbb8a301012898e61fed81ceb92c6fa154e02658e8b30049addfb7560f5b5ce10e2f42c913701a86f5faa431bd9213d14fccbed406708837889ea44b1ac47f78dc46d26552edd1fd2ada285fb49fd8db5290b485688d61156e07e47455dc514df466f324a01d71b3e5ebc7f19c10727195b0c73c838117e211021aea0f80f45c8bfe3d1211d8e265081d199cd7f1f2f9119e60ed8c05d19e6f06189899fffa084afb02b4dedff05644389f158e3a4ef36e8cdb250fdb8fa94c82afe4198714687c425ba6916d147c92d24a4cf3e56e2f78a89a9196cabcd5acaf2ee2b39bcee3493063487500e8b3c70f13c821a4c2cbf3e8da8b579c9454d0c0bc9a583afa1d2fb48765c7a15ac67d91cb417d5b87c7badaf8f89f4507ed59705bcd5829bca6c9822e99b78425bbe46236b07121cc1b77e4896be3e52741811ff7314abdbe9e7bf97058d9acb780f1abbee749a6abb5eacc740b10336052dd943e51131428293d34f27eff6d8cede64aa107fb6fdfbb604dec658dbff08859bb8ed0e2acaf23ca0f4e8fc9246a005320273e794489a257abc07fbff68daf5790ea4e885416bab47077241192374b530eff3660551ee709a30e1c857b64dd0dfefcb9a42de6c8c1c5625f76efb4f35d301126cee1d62029bd4773f5bd85996b3b3c51d83d17b63f16533614ea9ddcf80abea5080e9dfab868cb479847a3b3853370b9c45720e840699949445f6972752d2ff2ed31bfe9cc54d77a3fa7c75aa61831cce3b2e6c48ae0e9a1d8099a5bfca27e94a20bd4a91bbbfbf3b01e8c8193e82592b7afe63f736d9adf03fbe1e816b119c957affb6725aa2073737f2a6af1abd562fca6b3876d8ecd7534a81a80405f62f87d82b57d0a638cda32ffb639cd9ea1b1635750edeba217ffd5a745e583fdec4c63f67efff088e35500515cf29ff86c4102f9bd66e92910126c91f4b78a7fef9fed6030684a68f6dfb273a8a65237825412b1a3134dfdc7ae3af62f4ac9d4ef98ca169e7b798801e6e08dd1c6f5781b21a6c23e611f67cf584bd8228eb685d81443ca362855a004df3be5890de210a258a50317e8f5bb1ca926899de8eb2548fef3134a8e751b8ea924d408b5f525124979019a3b2b28fb68e854245a2df16524b252e15f6c24727f6c94df470b2b84322f71ee1ed97e0470"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0xffffffffffffffc0, 0xffffffff, 0x3, 0x401, 0x4}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000500)={r4, 0xffffffff, 0x0, 0x8, 0x3ff}, &(0x7f0000000540)=0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="fbbded53be836e6e6265876dbb3b9673f09b2dba223a297eff38fc445f57bb9a9c034f12d22f73c7d1750efae5fce9c6057b2f37092295f9f960e0bd01b7d14d9e5edfb5e7aeaea8325d352146cde4d24bc9d102b3168a6d9c3ce7f54d3e618ff0f33f7dc4f26c03613962556e2a7e890557a5d245793a688bc817cb0a4b8e25e71cb694653065960ddfe78f4fd8877a1ea1d361685984eb99ccc416727330dd1be24702adc4eb21", 0xa8}, {&(0x7f0000000280)="a2258b66abe6e8deec2cdadc0c54d77a0498d9c766e6064be02a5022c4f8729bf1256ded90956a423d62ca092175bf5b866a0a71d851c9d18d40cd6ba786a5c59db8974b57870160759e5862bb42c1973d51e60bc6ded9c639a3c33b997ff3274f8fdd29ebc12c8ad106a547f84f4c075f76569793166e30cfc6f6e3443afa2cad62ecd94e83c29606c2b86ee7356b5412f6c6e500781e4487e6058abaa419d3543c2c21c3f974c1db5c9b361c36ffd369ca604d2531adc24f85689395d129161af503772e2e91a5a3d514df57a6793937fdb3100286f1", 0xd7}], 0x2, 0x7) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @dev}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) connect$packet(r2, &(0x7f00000004c0)={0x11, 0x11, r5, 0x1, 0x200}, 0x14) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:12 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x3580, 0x2000000000000057]}) 03:53:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:13 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x3600, 0x2000000000000057]}) 03:53:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0x220000) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000180)=0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="75709e3786026059480d38702471ad42c9ef7e1e069e35216e858dea9c7cbabbd258029d5e07a679223a9298", 0x2c}, {&(0x7f00000002c0)='oS', 0x2}], 0x2) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1477.464527] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1477.472689] CPU: 1 PID: 7812 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1477.479810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.489161] Call Trace: [ 1477.491760] dump_stack+0x1db/0x2d0 [ 1477.495393] ? dump_stack_print_info.cold+0x20/0x20 [ 1477.500421] handle_userfault.cold+0x3d/0x5c [ 1477.504887] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1477.509477] ? print_usage_bug+0xd0/0xd0 [ 1477.513550] ? futex_wait_setup+0x430/0x430 [ 1477.517872] ? print_usage_bug+0xd0/0xd0 [ 1477.521944] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1477.526958] ? add_lock_to_list.isra.0+0x450/0x450 [ 1477.531912] ? __handle_mm_fault+0x4552/0x55a0 [ 1477.536500] ? find_held_lock+0x35/0x120 [ 1477.540562] ? __handle_mm_fault+0x4552/0x55a0 [ 1477.545137] ? lock_acquire+0x1db/0x570 [ 1477.549112] ? kasan_check_read+0x11/0x20 [ 1477.553281] ? do_raw_spin_unlock+0xa0/0x330 [ 1477.557709] ? do_raw_spin_trylock+0x270/0x270 [ 1477.562312] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1477.567434] __handle_mm_fault+0x4563/0x55a0 [ 1477.571862] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1477.576722] ? check_preemption_disabled+0x48/0x290 [ 1477.581754] ? handle_mm_fault+0x3cc/0xc80 [ 1477.585998] ? lock_downgrade+0x910/0x910 [ 1477.590144] ? kasan_check_read+0x11/0x20 [ 1477.594292] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1477.599566] ? rcu_read_unlock_special+0x380/0x380 [ 1477.604498] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1477.610032] ? check_preemption_disabled+0x48/0x290 [ 1477.615069] handle_mm_fault+0x4ec/0xc80 [ 1477.619163] ? __handle_mm_fault+0x55a0/0x55a0 [ 1477.619216] __do_page_fault+0x5da/0xd60 [ 1477.619236] do_page_fault+0xe6/0x7d8 [ 1477.631694] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1477.636644] ? vmalloc_sync_all+0x30/0x30 [ 1477.640791] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1477.646255] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1477.651195] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1477.656255] ? page_fault+0x8/0x30 [ 1477.659800] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:53:13 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x1000000000, 0x0, @mcast2, 0x6}}}, 0x88) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000700)='/dev/bus/usb/00#/00#\x00', 0x3, 0x400000) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000880)={0x400d, 0x6, 0x1, 0x100000001}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x0, @rand_addr="cabcaa1e344e0ed74cf5487f2d4b0d28", 0x100000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x1f, @loopback={0x0, 0x300}}}}, 0x108) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000780)={0x0, 0x0, @pic={0x10, 0x4, 0x80000000, 0x7ff, 0xe00000000, 0x1, 0x4, 0x5, 0x7, 0x7, 0x3, 0xc6cd, 0x5, 0xffff, 0x100, 0x9}}) prctl$PR_SET_ENDIAN(0x14, 0x2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x482880, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0x0, "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", 0x8, 0x5, 0x9, 0x1f, 0x7, 0x1ff, 0x10000}, r5}}, 0x128) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f00000006c0)={0x5, 0x1}) r6 = syz_open_dev$mouse(&(0x7f0000000680)='/dev/input/mouse#\x00', 0x4, 0x18000) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000380)={0x0, 0x0, @ioapic}) getsockopt$inet6_dccp_buf(r0, 0x21, 0xce, &(0x7f00000002c0)=""/147, &(0x7f0000000180)=0x93) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000140)={0x5, 0x18, [0x80000001, 0xffffffff7fffffff, 0x9, 0x80000001, 0x10001, 0xfff]}) 03:53:13 executing program 5: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rmdir(&(0x7f0000000140)='./file0\x00') setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) io_setup(0x9, &(0x7f0000000180)=0x0) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xd42400000000000, r0, &(0x7f00000001c0)="f8bd34ffbf1c8d64078615c221807bc649e9aa1a01ed0e6109f3da4579b21ce5d6ff20d6c2b074b6756d6548b0bc41a8dbded098f89d3a0cb872e3", 0x3b, 0x7, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000300)) r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x10) mknodat(r3, &(0x7f0000000380)='./file0\x00', 0x800, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x253) [ 1477.664653] ? page_fault+0x8/0x30 [ 1477.668233] page_fault+0x1e/0x30 [ 1477.671685] RIP: 0033:0x451910 [ 1477.674861] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1477.693755] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1477.699119] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1477.706391] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1477.713661] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1477.720934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1477.728202] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:13 executing program 1: r0 = socket$inet(0x2, 0x200000000000001, 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1477.776056] net_ratelimit: 26 callbacks suppressed [ 1477.776066] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1477.817200] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1477.855623] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1477.895931] CPU: 1 PID: 7812 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1477.903036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.912381] Call Trace: [ 1477.915006] dump_stack+0x1db/0x2d0 [ 1477.918647] ? dump_stack_print_info.cold+0x20/0x20 [ 1477.923683] handle_userfault.cold+0x3d/0x5c [ 1477.928112] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1477.932730] ? print_usage_bug+0xd0/0xd0 [ 1477.936800] ? futex_wait_setup+0x430/0x430 [ 1477.941172] ? print_usage_bug+0xd0/0xd0 [ 1477.945268] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1477.950289] ? add_lock_to_list.isra.0+0x450/0x450 [ 1477.955233] ? __handle_mm_fault+0x4552/0x55a0 [ 1477.959832] ? find_held_lock+0x35/0x120 [ 1477.963895] ? __handle_mm_fault+0x4552/0x55a0 [ 1477.968529] ? lock_acquire+0x1db/0x570 [ 1477.972518] ? kasan_check_read+0x11/0x20 [ 1477.976668] ? do_raw_spin_unlock+0xa0/0x330 [ 1477.981081] ? do_raw_spin_trylock+0x270/0x270 [ 1477.985692] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1477.990822] __handle_mm_fault+0x4563/0x55a0 [ 1477.995242] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1478.000089] ? check_preemption_disabled+0x48/0x290 [ 1478.005113] ? handle_mm_fault+0x3cc/0xc80 [ 1478.009363] ? lock_downgrade+0x910/0x910 [ 1478.013521] ? kasan_check_read+0x11/0x20 [ 1478.017672] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1478.022945] ? rcu_read_unlock_special+0x380/0x380 [ 1478.027873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1478.033411] ? check_preemption_disabled+0x48/0x290 [ 1478.038430] handle_mm_fault+0x4ec/0xc80 [ 1478.042553] ? __handle_mm_fault+0x55a0/0x55a0 [ 1478.047186] __do_page_fault+0x5da/0xd60 [ 1478.051276] do_page_fault+0xe6/0x7d8 [ 1478.055072] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1478.060004] ? vmalloc_sync_all+0x30/0x30 [ 1478.064166] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1478.069630] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1478.074559] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1478.079576] ? page_fault+0x8/0x30 [ 1478.083114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1478.087960] ? page_fault+0x8/0x30 [ 1478.091512] page_fault+0x1e/0x30 [ 1478.094957] RIP: 0033:0x451910 [ 1478.098145] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1478.117043] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1478.122396] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1478.129658] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1478.136922] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1478.144196] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1478.151478] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:13 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4001, 0x2000000000000057]}) 03:53:13 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x23, 0x75, &(0x7f0000000380)="1fe7d06d8bab2012b59795164cddc94dbd813da204bef784bd89926dac686d3696a084", &(0x7f00000003c0)=""/117, 0x9}, 0x28) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x100, @time={r3, r4+10000000}, 0x1, {0x0, 0xeb}, 0x9, 0x3, 0x9}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@remote, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r5, @ANYBLOB="080026bd700113dbdf2509000000800005002c00020008000100050000000800030004000000080004001f00000008000200400000000800010004000000080001006962000008000100657468000800010065746800140002000800020007000000080001000200000008000100756470001c000200080003000000000008004400000100000800030000000000ec0005001c00020008000200030000000800040000000000080004001f00000008000100657468001c000200080004000500000008000300070000000800040000fcffff1400020008000200030000000800030008000000080001006962000054000200080001001200000008000400ff0f000008000400000000000800010006000000080001001b00000008000200000200000800040001000000080002000500000008000400000800000801020053370000080001006962000024000200080001000c00000008000200caf3f475080004000400000008000200010000000c0002000800020059d27e6514000600040002000400020008000100060000000800060004000200240004000c00010073797a31000000001400010062726f6164636173742d6c696e6b0000240009000800020000100000080001000104000008000100faffffff080002000800000018628c5f25694bf0b2ae504ed865e19e5901c87f5e0a986e"], 0x1e4}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4004000) 03:53:13 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) sendto$inet(r0, &(0x7f0000000040)="573c4082c1aef3281e0649e45ae7295b750576bd93463f0627675f2bc7666f255fdc892dadea6846919ae6472c775453f91aca343001243a9e946956d26f65effe74510bb18d4003e5da460732225ddda1241b4cca832bea6dea1c1b775074a76f70b7f3d72825981da2f98428fe80714b89dd3366de1243a7789c7154ca811a48a6fc7cae7bc88e1ccc9b57fd48c7ddd631df7ca2229c3babc34834670ee42fc7d5d827ce2aebe7da8f8497268d94bd9c5a16e75cda8c7a80364ab751f98a1e3a12", 0xc2, 0x80, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) [ 1478.358213] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1478.377332] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4305, 0x2000000000000057]}) [ 1478.406611] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1478.416262] CPU: 0 PID: 7863 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1478.423368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.432713] Call Trace: [ 1478.435320] dump_stack+0x1db/0x2d0 [ 1478.438968] ? dump_stack_print_info.cold+0x20/0x20 [ 1478.444020] handle_userfault.cold+0x3d/0x5c [ 1478.448440] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1478.453023] ? print_usage_bug+0xd0/0xd0 [ 1478.457100] ? futex_wait_setup+0x430/0x430 [ 1478.461417] ? print_usage_bug+0xd0/0xd0 [ 1478.463888] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1478.465468] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1478.465483] ? add_lock_to_list.isra.0+0x450/0x450 [ 1478.465516] ? __handle_mm_fault+0x4552/0x55a0 [ 1478.465528] ? find_held_lock+0x35/0x120 [ 1478.465542] ? __handle_mm_fault+0x4552/0x55a0 [ 1478.465554] ? lock_acquire+0x1db/0x570 [ 1478.465573] ? kasan_check_read+0x11/0x20 03:53:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4788, 0x2000000000000057]}) [ 1478.482938] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1478.483630] ? do_raw_spin_unlock+0xa0/0x330 [ 1478.483645] ? do_raw_spin_trylock+0x270/0x270 [ 1478.483658] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1478.483679] __handle_mm_fault+0x4563/0x55a0 [ 1478.531593] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1478.536439] ? check_preemption_disabled+0x48/0x290 [ 1478.541464] ? handle_mm_fault+0x3cc/0xc80 [ 1478.545732] ? lock_downgrade+0x910/0x910 [ 1478.549897] ? kasan_check_read+0x11/0x20 [ 1478.551426] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1478.554076] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1478.554093] ? rcu_read_unlock_special+0x380/0x380 [ 1478.554109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1478.554139] ? check_preemption_disabled+0x48/0x290 [ 1478.554190] handle_mm_fault+0x4ec/0xc80 [ 1478.573603] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1478.578085] ? __handle_mm_fault+0x55a0/0x55a0 [ 1478.578134] __do_page_fault+0x5da/0xd60 [ 1478.578157] do_page_fault+0xe6/0x7d8 03:53:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4888, 0x2000000000000057]}) [ 1478.578170] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1478.578186] ? vmalloc_sync_all+0x30/0x30 [ 1478.578201] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1478.622311] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1478.627241] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1478.632256] ? page_fault+0x8/0x30 [ 1478.635815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1478.640659] ? page_fault+0x8/0x30 [ 1478.644204] page_fault+0x1e/0x30 [ 1478.647656] RIP: 0033:0x451910 [ 1478.650845] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1478.669764] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1478.675133] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1478.682415] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1478.683527] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1478.689693] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:53:14 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0xff, {{0xa, 0x0, 0x0, @mcast1}}}, 0xffffffffffffffc8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0xa0081, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400000004) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1478.689700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1478.689722] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1478.745103] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:14 executing program 1: r0 = socket$inet(0x2, 0x4000000001000004, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:14 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000000000a00000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef3c000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x2000) ioctl$BLKRRPART(r2, 0x125f, 0x0) [ 1478.977901] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1478.982541] CPU: 1 PID: 7863 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1478.989641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.999017] Call Trace: [ 1479.001602] dump_stack+0x1db/0x2d0 [ 1479.005238] ? dump_stack_print_info.cold+0x20/0x20 [ 1479.010292] handle_userfault.cold+0x3d/0x5c [ 1479.014709] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1479.019308] ? print_usage_bug+0xd0/0xd0 [ 1479.023368] ? futex_wait_setup+0x430/0x430 [ 1479.027684] ? print_usage_bug+0xd0/0xd0 [ 1479.031740] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1479.036752] ? add_lock_to_list.isra.0+0x450/0x450 [ 1479.041688] ? __handle_mm_fault+0x4552/0x55a0 [ 1479.046266] ? find_held_lock+0x35/0x120 [ 1479.050322] ? __handle_mm_fault+0x4552/0x55a0 [ 1479.054882] ? lock_acquire+0x1db/0x570 [ 1479.058838] ? kasan_check_read+0x11/0x20 [ 1479.062965] ? do_raw_spin_unlock+0xa0/0x330 [ 1479.067367] ? do_raw_spin_trylock+0x270/0x270 [ 1479.071943] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1479.077071] __handle_mm_fault+0x4563/0x55a0 [ 1479.081469] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1479.086329] ? check_preemption_disabled+0x48/0x290 [ 1479.091323] ? handle_mm_fault+0x3cc/0xc80 [ 1479.095540] ? lock_downgrade+0x910/0x910 [ 1479.099663] ? kasan_check_read+0x11/0x20 [ 1479.103787] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1479.109056] ? rcu_read_unlock_special+0x380/0x380 [ 1479.113965] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1479.119478] ? check_preemption_disabled+0x48/0x290 [ 1479.124495] handle_mm_fault+0x4ec/0xc80 [ 1479.128546] ? __handle_mm_fault+0x55a0/0x55a0 [ 1479.133104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1479.138616] ? vmacache_update+0x114/0x140 [ 1479.142847] __do_page_fault+0x5da/0xd60 [ 1479.146889] do_page_fault+0xe6/0x7d8 [ 1479.150682] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1479.155587] ? vmalloc_sync_all+0x30/0x30 [ 1479.159709] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1479.165150] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1479.170070] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1479.175109] ? page_fault+0x8/0x30 [ 1479.178648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1479.183473] ? page_fault+0x8/0x30 [ 1479.186997] page_fault+0x1e/0x30 [ 1479.190425] RIP: 0033:0x451910 [ 1479.193595] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1479.212476] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1479.217830] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e 03:53:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x6000, 0x2000000000000057]}) 03:53:14 executing program 1: r0 = socket$inet(0x2, 0x3ffffffffffffffe, 0x20a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x80000000, 0x2, 0x81, 0x4}, 0x14) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(r0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffed5) 03:53:14 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1479.225109] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1479.232378] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1479.239663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1479.246942] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f00000000c0)='/-ev/input/event#\x00', 0xfffffffffffffff4, 0x2080) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x6488, 0x2000000000000057]}) 03:53:15 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x400, 0x200) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000013c0)={0x0, 0x0, 0x2080}) 03:53:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'team_slave_0\x00', 0x4}, 0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f0000000200)='/-ev/input/event#\x00', 0x5, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x8000000000000, 0x800, 0x86}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:15 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x4000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) syz_read_part_table(0x80000000, 0x5, &(0x7f0000000580)=[{&(0x7f00000001c0)="55a79d84855f1ae85b7eadff623440ba619f901933c08e84ac7cca201d04eea5692b294b4e8cde42e014a4503a3fd934903a9109c3dea83d59a57407083cd548ea6621cde0b3ff4bb16d1026f764d906b306ef0034ddac120c57397a856394dcba6a9ff8f798804a", 0x68, 0x35f6}, {&(0x7f0000000240)="ac8bcd506aa8818a47e25b885a9554c71fb3efcfe6fad6082444ac46fc536677cf3021495f2e245d758724832451209511fe5fb6c0d387399a2a9f77bb1c0601686d6409428c8e158bbb30d4fc6021b2fcc8438f2c78702e0adc76d62ddf3f0dff46c32addac38d1c5351217626d77965ea7d18a4dc9b10d233ea04ff59a93fd09990367f2b321000e21175d317b1c19c72fbfdf85b0d3dbc342a781f31ccbb140897b62c990d1778e409d9d60ff762f6f219d7bd473587dddfc5261cdb2928d2ca9fb61a8", 0xc5, 0x200}, {&(0x7f0000000340)="0b2da04b60fc74bac92452fbe4527a0194a579b5a5b1a0578cb3f89c2e998e29e11d93176816816ebcbe4a9102a627e862bea7ae3cf723a3b3d9f53447f8570a1aab3200fea4da950a8e4a6eaf7d605e96982321b6d95f20f0eef05c29c3114090522014354872d1d3d1983b39f305eaba92966abab6750e3a62cd9e709c810091471767dd836c92c052f103c6fac49111ffb7a65c1063b3e75b930b6f6daf509ef16ea4ea49da774e26b4197c16019ce7f650a76492eb9db65b515cb16318a5d4e4ac21523756b4e609081fa4ff6b94", 0xd0, 0x348}, {&(0x7f0000000440), 0x0, 0xce2a}, {&(0x7f0000000480)="598ed4af4ce72e162046886bf31f7af26ea540c1df071e867127f25157d676331f8ac6b1e8ad83d23a63880a1b8a055f6e802f36adf53ca04da7229f182ad9cf8e0c1e048b152ddde9fb2db9fb5053a6ecc3fd39dcdc4f80a80f5212ad0c348d7ed738470313340d7c89919b246e10a93bfd7f0a12978744f868c77f6379d620028bcc3116e654353076172f9087fec04854c90b4d56fbcf16ad7089b38a2eea04a3f2f8fc5348ff8f2606c63dd2e4b7482ced1d07344c8b2190195931b3a776430b39bb0c9f3f516cc115c76d228fee4a77ffd4c3aed99ca1682132f9f5af5d246572d65186f1d46c", 0xe9, 0x800}]) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'system'}, {0x20, '['}, {0x20, '/dev/snd/pcmC#D#p\x00'}, {0x20, '\fmime_typeproc$'}, {0x20, '/dev/snd/pcmC#D#p\x00'}, {0x20, 'posix_acl_accessnodev'}], 0xa, "4404272872a5ac3bc5b2ce82c569720059bc57bf4d67db930345fc0a45754015fe701e625034c3db770acaf095b1dd05aa94ccd3866eeb640193f7d822beb260a5a486af99a2eee2534604ea3a797eb948bcc06050eca9433973c2c8af3a50af17b834efc232e7071182e80e6230f7ef90eb3f5e34fa8c60ca1f858a76d27c538760de2c0a1e7b6f9fd582a8276c7df00bd0d02a6b4d878940891fc5259ec4484a8a24291d3491b10a"}, 0x109) prctl$PR_GET_FP_MODE(0x2e) 03:53:15 executing program 5: r0 = socket$inet6(0xa, 0x7fffe, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) readahead(r1, 0x922, 0x4) 03:53:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') mlockall(0x8000000002) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x35, 0x2000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x800e, 0x2000000000000057]}) 03:53:15 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x0, {{0xa, 0x4e24, 0x1, @remote, 0xe8c4}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x80000000, @empty, 0x82}}, {{0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, [], 0x19}, 0xffffffffffffe7d5}}, {{0xa, 0x4e24, 0x3f, @dev={0xfe, 0x80, [], 0x15}, 0x4}}]}, 0x210) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2949}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x40}}, 0x200000d1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0xfffffffffffffff9}, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0)="ce7b601b7a16d92eb14d5ba2df3e56079535fb2f34c0fccd73204c94bf3c6fcf0d1df5c7a45c0e7bd9bef9fc6cf9181f88c15a17802ab315eec4595835c3a8ef1441b6118855df59a2f6ff102e3162c6260ea856cbed319b41569941b2f83ed08992de377c6776e4caec8026b27c526a81d564fb28ac68c80263ac5168e88157d8611c4ad06cfee7cca28b22b4c963af66d332a0d4a4eff68d566d1165bea42f9497278336bc748b33b932718dfd4e385d4bfb5e097cc0ab2013e0aa3ce5937911ce3e54ed5a8dff10471576b46f71ff83f0ddeeb29f41cf0b8621e09e9b7c431034dab9b5cfdfafc54c986193a9", &(0x7f00000001c0)="23a0c9b4468852c9c9fd59bbd8a88bffca6ece2a7dc2e3d311c654657ca40e5c74bb21fa82345fa0d83facf9b5b58a2720fcad18e244ce07d6a957af4941cf3e8e4c2c749999afc9", 0x1}, 0x20) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0xc, 0x7, 0x80000004}) r2 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0xfffffffeffffffff, &(0x7f0000000280)=""/239) 03:53:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8035, 0x2000000000000057]}) 03:53:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:15 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f00000001c0)="56b21cb28194ee98b78b3203", 0xc, 0xd376}, {&(0x7f00000002c0)="50ab50f1a3a6ced415ec7fa377fd5c658485e9846df5edf395c115c63e13fdc5f298adf0e501b9b19a9cf0dfcd86264600563d9c326c5c508d081ba34c0fac24fee8d6ff5c8598ec08fe6d7a492ce5586513ca04da6460122f1f5777612196d3b9c83869a477849af14e31dc239be9b00b88f05d49d60b604e4edda7bf3ec1bca2623e9e9019b587b97a756a0de13b13fb169ca02b251cd050e4ac92ee61a1a3917b8d1dbdb39ba35663924c01b936c41abd5c26ac6995eae05de9d56600b384a959edc243b853a31fa0335f75b0073a1059df79ae9db743", 0xd8, 0x7}], 0x80, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x8c2, 0x88000) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000005c0)={r1, r0, 0x7, 0xd1, &(0x7f00000004c0)="4a841d672c9ae7f6dc2f476bab19cd2470e5f7b4403ca5c37b08de4c92af195b02140be53654fb368f61777691fdd72698fb4feed9c85a4db5d33b82015a69eaa04f614e0f3c463fb1154a28d487a8c3b25cb81245658966146a45ac0082bf652f8f877bc447a8944b33131a6089581d912d08118fb1cde464e78e9c9deb6c274b8e5163c95e9998c7f6d7165973dd64d22a9bb347f5da221bf371d077f74870a465586e692e64bf1242923cd19f83bc917b645ade55931e40da2e86a659bfa8b9a74605b51bb21ea9a4b4eee11a345d41", 0x1e1, 0x2, 0xfffffffffffffffb, 0x8000, 0x10000, 0x3, 0x6, 'syz1\x00'}) socket$netlink(0x10, 0x3, 0x3) 03:53:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x1f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0x1000, "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"}, &(0x7f0000001180)=0x1008) dup3(r0, r0, 0x80000) 03:53:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8100, 0x2000000000000057]}) [ 1480.168352] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) [ 1480.182607] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1480.193218] CPU: 0 PID: 7994 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1480.200336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.209692] Call Trace: [ 1480.212292] dump_stack+0x1db/0x2d0 [ 1480.215933] ? dump_stack_print_info.cold+0x20/0x20 [ 1480.220977] handle_userfault.cold+0x3d/0x5c [ 1480.225415] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1480.230195] ? set_next_entity+0x2ef/0xb00 [ 1480.234426] ? print_usage_bug+0xd0/0xd0 [ 1480.238496] ? add_lock_to_list.isra.0+0x450/0x450 [ 1480.243442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1480.249000] ? __handle_mm_fault+0x4552/0x55a0 [ 1480.253577] ? find_held_lock+0x35/0x120 [ 1480.257653] ? __handle_mm_fault+0x4552/0x55a0 [ 1480.262235] ? lock_acquire+0x1db/0x570 03:53:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8847, 0x2000000000000057]}) [ 1480.266215] ? kasan_check_read+0x11/0x20 [ 1480.270353] ? do_raw_spin_unlock+0xa0/0x330 [ 1480.274763] ? do_raw_spin_trylock+0x270/0x270 [ 1480.279355] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1480.284465] __handle_mm_fault+0x4563/0x55a0 [ 1480.288925] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1480.293807] ? check_preemption_disabled+0x48/0x290 [ 1480.298819] ? handle_mm_fault+0x3cc/0xc80 [ 1480.303125] ? lock_downgrade+0x910/0x910 [ 1480.307268] ? kasan_check_read+0x11/0x20 [ 1480.311419] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1480.316696] ? rcu_read_unlock_special+0x380/0x380 [ 1480.321628] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1480.327175] ? check_preemption_disabled+0x48/0x290 [ 1480.332211] handle_mm_fault+0x4ec/0xc80 [ 1480.336267] ? __handle_mm_fault+0x55a0/0x55a0 [ 1480.340870] __do_page_fault+0x5da/0xd60 [ 1480.344938] do_page_fault+0xe6/0x7d8 [ 1480.348734] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1480.353668] ? vmalloc_sync_all+0x30/0x30 [ 1480.357909] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1480.363353] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1480.368370] ? page_fault+0x8/0x30 [ 1480.371907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1480.377522] ? page_fault+0x8/0x30 [ 1480.381059] page_fault+0x1e/0x30 [ 1480.384514] RIP: 0033:0x451910 [ 1480.387730] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1480.406661] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1480.412016] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e 03:53:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0xffffff69, 0x0, 0x0, 0x6a624a5bf205c452) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xed, 0x4) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @default, @null]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@rand_addr="92e1870126c5856786a84df79584755d", @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000, 0x5499ed95, 0x2, 0x500, 0x4, 0x1000000, r2}) 03:53:16 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8848, 0x2000000000000057]}) 03:53:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1480.419290] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1480.426554] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1480.433815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1480.441077] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x100000005, {{0xa, 0x0, 0x0, @remote}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 'caif0\x00'}) read(r3, &(0x7f0000000300)=""/206, 0xce) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x6, 0x5}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0xd2, 0x6, 0x4}, &(0x7f00000000c0)=0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:16 executing program 1: r0 = socket$inet(0x2, 0x80000, 0x8) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:16 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8864, 0x2000000000000057]}) 03:53:16 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1480.705566] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1480.710369] CPU: 0 PID: 8043 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1480.717465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.726815] Call Trace: [ 1480.729398] dump_stack+0x1db/0x2d0 [ 1480.733031] ? dump_stack_print_info.cold+0x20/0x20 [ 1480.738063] handle_userfault.cold+0x3d/0x5c [ 1480.742481] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1480.747069] ? print_usage_bug+0xd0/0xd0 [ 1480.751132] ? futex_wait_setup+0x430/0x430 [ 1480.755508] ? print_usage_bug+0xd0/0xd0 [ 1480.759562] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1480.764576] ? add_lock_to_list.isra.0+0x450/0x450 [ 1480.769517] ? __handle_mm_fault+0x4552/0x55a0 [ 1480.774107] ? find_held_lock+0x35/0x120 [ 1480.778181] ? __handle_mm_fault+0x4552/0x55a0 [ 1480.782763] ? lock_acquire+0x1db/0x570 [ 1480.786738] ? kasan_check_read+0x11/0x20 [ 1480.790911] ? do_raw_spin_unlock+0xa0/0x330 [ 1480.795315] ? do_raw_spin_trylock+0x270/0x270 [ 1480.799914] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 03:53:16 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076681251190d2a6f6219a405b942dcc325b8d3f2e77302d4e86ef202a1740dea144302fa7e1694875cb3b829c87617aebcec62e541c1b94972e1d03427075ac46dde8df26a7296efef875fad7866604a94626431936937b22e35306cbb3bef0ece11904e0c78d7dbbf9a982f634e71867ac468977a3889a0d4470514eae903b8"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x20, 0x10000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0x1) r3 = socket(0x10, 0x5, 0xffffffff) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 1480.805027] __handle_mm_fault+0x4563/0x55a0 [ 1480.809439] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1480.814301] ? check_preemption_disabled+0x48/0x290 [ 1480.819315] ? handle_mm_fault+0x3cc/0xc80 [ 1480.823553] ? lock_downgrade+0x910/0x910 [ 1480.827708] ? kasan_check_read+0x11/0x20 [ 1480.831856] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1480.837146] ? rcu_read_unlock_special+0x380/0x380 [ 1480.842120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1480.847670] ? check_preemption_disabled+0x48/0x290 [ 1480.852689] handle_mm_fault+0x4ec/0xc80 [ 1480.856756] ? __handle_mm_fault+0x55a0/0x55a0 [ 1480.861345] __do_page_fault+0x5da/0xd60 [ 1480.865420] do_page_fault+0xe6/0x7d8 [ 1480.869239] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1480.874222] ? vmalloc_sync_all+0x30/0x30 [ 1480.878385] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1480.883837] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1480.888773] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1480.893795] ? page_fault+0x8/0x30 [ 1480.897343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1480.902234] ? page_fault+0x8/0x30 [ 1480.905792] page_fault+0x1e/0x30 [ 1480.909244] RIP: 0033:0x451910 [ 1480.912434] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1480.931330] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1480.936690] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1480.943952] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:53:16 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8906, 0x2000000000000057]}) 03:53:16 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x109000, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x4, 0x3d, &(0x7f0000000040)="71c66dee60e9413786f90cc1f2a81e10dafcafd648b69feaa8321146f4512b44075bcc2e8abda62a09f36d1b0c5eefe0ad14e2cf2643f74e0ee0d598b9"}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062f9fc67cab9bf4adc3c0e427f7351b22d7515c104d7da5016243014ac243487a8b29441005ebf8300da30a6ac006c8c2f1c089427cbc49c1a8b"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1480.951251] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1480.958515] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1480.965779] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:16 executing program 1: r0 = socket$inet(0x2, 0x7, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f00000001c0)="0adc25023cb7627b8205b41c4d887f742a3f88397882de87fd6613a2d0b305d72e953cec68d8cc755728173e3689f5a82745a7e56927fb2a66dc35b336528afcbe3a6b0b7c84f8d8b2c04319be03868c9479420a2683f8") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:16 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xf000, 0x2000000000000057]}) 03:53:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:16 executing program 5: r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x22003, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x4102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002580)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6}}, &(0x7f0000002680)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000026c0)={@local, 0x78, r3}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000003a88c4389d580347000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000c8024456219b5e3af439e8e8f509fe1fe177d281a3fd84e0fda018467d62c02ca8b00bf545288fdb63000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1481.261387] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1481.301211] CPU: 1 PID: 8098 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1481.308316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.317656] Call Trace: [ 1481.320242] dump_stack+0x1db/0x2d0 [ 1481.323891] ? dump_stack_print_info.cold+0x20/0x20 [ 1481.328936] handle_userfault.cold+0x3d/0x5c [ 1481.333357] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1481.337949] ? print_usage_bug+0xd0/0xd0 [ 1481.342008] ? futex_wait_setup+0x430/0x430 [ 1481.346329] ? print_usage_bug+0xd0/0xd0 [ 1481.350404] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1481.355414] ? add_lock_to_list.isra.0+0x450/0x450 [ 1481.360348] ? __handle_mm_fault+0x4552/0x55a0 [ 1481.364926] ? find_held_lock+0x35/0x120 [ 1481.368983] ? __handle_mm_fault+0x4552/0x55a0 [ 1481.373561] ? lock_acquire+0x1db/0x570 [ 1481.377547] ? kasan_check_read+0x11/0x20 [ 1481.381710] ? do_raw_spin_unlock+0xa0/0x330 [ 1481.386118] ? do_raw_spin_trylock+0x270/0x270 [ 1481.390699] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1481.395807] __handle_mm_fault+0x4563/0x55a0 [ 1481.400221] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1481.405081] ? check_preemption_disabled+0x48/0x290 [ 1481.410111] ? handle_mm_fault+0x3cc/0xc80 [ 1481.414350] ? lock_downgrade+0x910/0x910 [ 1481.418501] ? kasan_check_read+0x11/0x20 [ 1481.422648] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1481.427924] ? rcu_read_unlock_special+0x380/0x380 [ 1481.432879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1481.438412] ? check_preemption_disabled+0x48/0x290 [ 1481.443431] handle_mm_fault+0x4ec/0xc80 [ 1481.447502] ? __handle_mm_fault+0x55a0/0x55a0 [ 1481.452105] __do_page_fault+0x5da/0xd60 [ 1481.456188] do_page_fault+0xe6/0x7d8 [ 1481.459988] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1481.464919] ? vmalloc_sync_all+0x30/0x30 [ 1481.469087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1481.474552] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1481.479506] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1481.484527] ? page_fault+0x8/0x30 [ 1481.488082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1481.492940] ? page_fault+0x8/0x30 [ 1481.496483] page_fault+0x1e/0x30 [ 1481.499967] RIP: 0033:0x451910 [ 1481.503154] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1481.522061] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1481.527429] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1481.534707] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1481.541997] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:53:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xf0ff7f, 0x2000000000000057]}) 03:53:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8a60", 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xf7, "2ec8ab91f5bf7a2aaab09b75bc33748af059d067f658ca91292c34e964885d647f2d712d56c1bfaa8bf2511e061273c3b64fc8b7f2b9393e18577f3aade62c7875b135a60362b2b713981b0dd7bd7514ccc3fc0878ee9123eaaea2b3b352dcfbacf085795402584551c62a05f5e574d4f9b7151092b11ec3f9c3f53796dbfad6c3b059646dcf9393f73befed189ad60ff434e9e9d4d04de079344df6097fd6ec84924ddbf96c25ae08e5b5fb4188e099f69fe424f3a4cfaa7e64ba40ea5a54054500c87954e81c1b8ca342f8961834ada8f95753dda9ff436431517cda9d37d4aa6dd6639a6899df1a21ca168d7121623a41d8578f363a"}, &(0x7f00000001c0)=0xff) [ 1481.549282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1481.556560] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:17 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xf0ffff, 0x2000000000000057]}) 03:53:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x0, @loopback, 0x4e24, 0x0, 'lblcr\x00', 0x0, 0x7, 0x4e}, 0x2c) 03:53:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:17 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x1, 0x0, @mcast1}}}, 0xfffffcf1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x7, 0x40000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x468, 0x6, 0x1000}, 0x4) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='/-ev/input/event#\x00', 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, r4) 03:53:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1000000, 0x2000000000000057]}) 03:53:17 executing program 1: r0 = socket$inet(0x2, 0x400000000001, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:53:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x2000000, 0x2000000000000057]}) 03:53:17 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x3, @rand_addr="9bd3599a018a97b03f7e697cf50b7fa7"}}}, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000200)={0x1c000000, 0x0, 0x4bbe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000380)) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x200, 0x80000) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x1f, 0xfffffffffffffeff, 0x9, 0x583ac0c5, 0x9, 0x0, 0x400, 0x7, 0xcc8, 0x1000, 0x4, 0x80000000}) bind$isdn_base(r1, &(0x7f0000000280)={0x22, 0xe609, 0x8, 0x4, 0x8}, 0x6) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) ioctl$TIOCSCTTY(r3, 0x540e, 0xffffffffffffffc0) 03:53:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x1a, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000000c0)=""/26}, &(0x7f00000001c0)=0x78) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:17 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x199843, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8a4e0e51f4c4f71ab86095ce5278163c11bb0b22dffddd41127034a240739ca6fb9060f96cae6035571e706220a9874d57c203c0e52d26153c4b2449d7ff192d00c009177fab8bca03f5b70fa6d2d4fcd654fe21f0113a42f7c19025934c127173e049a0e4acc0dbc6e1e9f42ad1d7181211a2048bb006d81a1ee2c54f30ec7e7dc7c87ecef1601c418702b9b09392678c390f61c97cc7cf4ab92218f8a94d8dd72b4dfa6acf", 0xa6}], 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x4800) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 03:53:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x3000000, 0x2000000000000057]}) 03:53:17 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a000000000000000000000000000000000000000000000100000900000000000000000000770e9067b1270b4e9196e0ae00000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) [ 1482.279877] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1482.284577] CPU: 0 PID: 8180 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1482.291714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.301073] Call Trace: [ 1482.303715] dump_stack+0x1db/0x2d0 [ 1482.307376] ? dump_stack_print_info.cold+0x20/0x20 [ 1482.312418] handle_userfault.cold+0x3d/0x5c [ 1482.316847] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1482.321434] ? print_usage_bug+0xd0/0xd0 [ 1482.325513] ? futex_wait_setup+0x430/0x430 [ 1482.329841] ? print_usage_bug+0xd0/0xd0 [ 1482.334045] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1482.339084] ? add_lock_to_list.isra.0+0x450/0x450 [ 1482.344060] ? __handle_mm_fault+0x4552/0x55a0 [ 1482.348651] ? find_held_lock+0x35/0x120 [ 1482.352732] ? __handle_mm_fault+0x4552/0x55a0 [ 1482.357323] ? lock_acquire+0x1db/0x570 [ 1482.361516] ? kasan_check_read+0x11/0x20 [ 1482.365672] ? do_raw_spin_unlock+0xa0/0x330 [ 1482.370085] ? do_raw_spin_trylock+0x270/0x270 [ 1482.374672] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1482.379821] __handle_mm_fault+0x4563/0x55a0 [ 1482.384262] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1482.389144] ? check_preemption_disabled+0x48/0x290 [ 1482.394417] ? handle_mm_fault+0x3cc/0xc80 [ 1482.398668] ? lock_downgrade+0x910/0x910 [ 1482.402824] ? kasan_check_read+0x11/0x20 [ 1482.406977] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1482.412251] ? rcu_read_unlock_special+0x380/0x380 [ 1482.417191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1482.422721] ? check_preemption_disabled+0x48/0x290 [ 1482.427764] handle_mm_fault+0x4ec/0xc80 [ 1482.431842] ? __handle_mm_fault+0x55a0/0x55a0 [ 1482.436430] __do_page_fault+0x5da/0xd60 [ 1482.440508] do_page_fault+0xe6/0x7d8 [ 1482.444324] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1482.449256] ? vmalloc_sync_all+0x30/0x30 [ 1482.453402] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1482.458885] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1482.463827] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1482.468840] ? page_fault+0x8/0x30 [ 1482.472397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1482.477235] ? page_fault+0x8/0x30 [ 1482.480804] page_fault+0x1e/0x30 [ 1482.484265] RIP: 0033:0x451910 [ 1482.487451] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1482.506345] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1482.511702] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1482.518984] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1482.526248] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1482.533533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1482.540812] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:18 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="f18802a249d59c8ac9833af6ca99a273bffc5e716175a9795ce16bdcef5cd7259557fac8ede47f091bf9e7b5e300f591b0a2e0bf6b335bbf6ce9b962aa96886c53aba8d3", 0x44, 0x5}, {&(0x7f0000000380)="c163e1bade5b9d340d23ee77da465b1593b91d9283b29264a877355f281ae80accef9c8b3a9d1c34fb3dba4f751a6559d5a128dadf7f700edd5762521ffc9e371e", 0x41, 0x7}, {&(0x7f0000000400)="e9d5b9582432dc17f2788b72063dc3b6d06e", 0x12, 0x9871}], 0x40, &(0x7f00000004c0)='/proc/self/net/pfkey\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000005c0)={0x4, 0x7}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000540)={0x586, 0x40}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000180)={0x81, 0xfffffffffffffffa, 0x80000001, 0x2, 0x1f, 0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000580)=0x7fffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ec0e6998ae2b1fd1a5a4f456ce43941adc4426a8f8b095ecdb143856e9aa6beeb218aadfe42a35ff0b7f005975d8d717d5208e06ae433039f3cc50e7854936444b535a4cf579d42ed0f751b7eeacfc01c0de7125d06b3edb08a5bf12c1346b64f9949b339976a4a654b8b962da6b8f483cc2599fe8352f8c00838c987bc4f4886eda4148077bd65b7643f480654d3eadc58bb828ea98865e98e893945b62827f7bc8db1040c9cd87064cb16e93a2bf45a05b761fa6c1978c0ef76f9d0c7431a86082", 0xc2, 0xffffffffffffffff) keyctl$clear(0x7, r1) 03:53:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000140)=0x1011f) ioctl$TIOCSCTTY(r0, 0x540e, 0x80000001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000040)) 03:53:18 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4000000, 0x2000000000000057]}) 03:53:18 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x5000000, 0x2000000000000057]}) [ 1482.657029] encrypted_key: insufficient parameters specified [ 1482.696690] encrypted_key: insufficient parameters specified [ 1482.705132] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1482.734667] CPU: 1 PID: 8199 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1482.741789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.751137] Call Trace: [ 1482.753745] dump_stack+0x1db/0x2d0 [ 1482.757375] ? dump_stack_print_info.cold+0x20/0x20 [ 1482.762406] handle_userfault.cold+0x3d/0x5c [ 1482.766821] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1482.771400] ? print_usage_bug+0xd0/0xd0 [ 1482.775479] ? futex_wait_setup+0x430/0x430 [ 1482.779843] ? print_usage_bug+0xd0/0xd0 [ 1482.783904] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1482.788921] ? add_lock_to_list.isra.0+0x450/0x450 [ 1482.793891] ? __handle_mm_fault+0x4552/0x55a0 [ 1482.798502] ? find_held_lock+0x35/0x120 [ 1482.802579] ? __handle_mm_fault+0x4552/0x55a0 [ 1482.807167] ? lock_acquire+0x1db/0x570 [ 1482.811164] ? kasan_check_read+0x11/0x20 [ 1482.815307] ? do_raw_spin_unlock+0xa0/0x330 [ 1482.819712] ? do_raw_spin_trylock+0x270/0x270 [ 1482.824294] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1482.829401] __handle_mm_fault+0x4563/0x55a0 [ 1482.833842] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1482.838730] ? check_preemption_disabled+0x48/0x290 [ 1482.843743] ? handle_mm_fault+0x3cc/0xc80 [ 1482.847985] ? lock_downgrade+0x910/0x910 [ 1482.852151] ? kasan_check_read+0x11/0x20 [ 1482.856313] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1482.861586] ? rcu_read_unlock_special+0x380/0x380 [ 1482.866537] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1482.872081] ? check_preemption_disabled+0x48/0x290 [ 1482.877109] handle_mm_fault+0x4ec/0xc80 [ 1482.881224] ? __handle_mm_fault+0x55a0/0x55a0 [ 1482.885842] __do_page_fault+0x5da/0xd60 [ 1482.889919] do_page_fault+0xe6/0x7d8 [ 1482.893722] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1482.898676] ? vmalloc_sync_all+0x30/0x30 [ 1482.902828] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1482.908292] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1482.913242] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1482.918275] ? page_fault+0x8/0x30 [ 1482.921823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1482.926670] ? page_fault+0x8/0x30 [ 1482.930220] page_fault+0x1e/0x30 [ 1482.933682] RIP: 0033:0x451910 [ 1482.936876] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1482.955777] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1482.961137] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1482.968418] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1482.975684] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 03:53:18 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x6000000, 0x2000000000000057]}) 03:53:18 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x7000000, 0x2000000000000057]}) 03:53:18 executing program 1: socket$inet(0x2, 0x0, 0xda6f) socket$inet(0x2, 0x4000000000000002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1482.982965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1482.990253] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:18 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8000000, 0x2000000000000057]}) 03:53:18 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) getrandom(&(0x7f00000002c0)=""/219, 0xdb, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1483.115220] net_ratelimit: 38 callbacks suppressed [ 1483.115227] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1483.206197] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x401}, &(0x7f00000001c0)=0x6) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000880)={0x4, 0x5}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={r1, 0x4010001}, &(0x7f0000000080)=0x7) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r4, 0x7, &(0x7f0000000840)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f0000000240)="368b6eaee53ca02186283cc3a9d69981d6c6efc332173577d6aedb1b5de73b129254ac53986c34c60387b713df479b370fff4e1c9f29bbbe58113349a241c1f1858bc0375199128e3ee4fa5ec6c7d4125fa7fd7d6899df0119c638211c9ba5a78cb88806fe6b4e482d423daa2c3fae50cfb1fc61661b4d", 0x77, 0x5, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x400, r0, &(0x7f0000000340)="7c6ec420641dadb94d8446c19be43ba59efe2946b3868d81fa4cfe6c8825f555901b7338c3fa74db6f74", 0x2a, 0x87, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f00000003c0)="93dfb2d00c8e163353200be5b1106cc9248c3de176852ff56766531df064a483a390b0ed16cda37d49684334332480f3a1ed27c22a738b8b600bd2be082489e3f5d93f8a172f391ed6432f65d7f861a435fb624657e0516fa9edd39db4ce6ec8aa09f7081d601df560c2c72839b5268853a7eba68fac24c03dba609b00011e2119daf0538d01850d746ed6c7a33fff26edf9886345964d43052a0e79db28b3ccd174901bac2a456ce84fbb63a69f5cabe14aa996510cda7e8452b96f47109e63c562413f538b1a76722e5089d0283ae979879f8f", 0xd4, 0x7, 0x0, 0x2, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000500)="46ee07c1561cd1a0a6c4fc7951de2a963e08bc4095ff87cf8975a495d79f290dd9a893f9a380d17a52f3e9b5fe963ccaaca9eeb0a742f0ebf8949a6f0418a2f25c25abf41f39eb6497ab1b0dddfa87abcc0660588528f2e709deacea956b70f5c933ad", 0x63, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xc2, r2, &(0x7f00000005c0)="27e13119af98ea", 0x7, 0x0, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000640)="fc649a07e33b5e99f9bb7476fc9bd4a4c02cd160d55ad76111485d79d0582ba3faf4c57c7be89ed703d05a1b03f37df23893cecb031012f1c1e1232da2a95ca0061a5f2dd61a2ccef169073c033fc0c0ab4679204049f98be48b716c7e4af7f301e909855c7892ae3d033b1d6ec27de2d342a14ad706325beadb072dda93392c5777ebe6bd03c3a733a7235de25ce5eaa9bde33997a2a9182dd9816aaf4a94a852d29e4440c2b528aef30876de78e38277604e", 0xb3, 0x7fff, 0x0, 0x2, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000740)="e0670058a699f70c0e304eadce1061236efd63cabc98d823118d4598d8cf48e75216340f0ba459a4eb44ef5a17c53a9d514073a6ca8731330a209719e6cc2ee23583704a12a136925b5faa715fe22c85129c7b4ea9f78b3080100882c860490417e9263f4210d78c2958adc2ef990d9e5c540b8564ac13f3e0023c0792fceaa18b27d49b", 0x84, 0x3, 0x0, 0x2, r2}]) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000008c0)='lp\x00', 0x3) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e24, @local}}}, 0x84) 03:53:18 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8060000, 0x2000000000000057]}) 03:53:18 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x7f) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000039c44f000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041653fdebafb556c4ed1aa1e6dcaf8277b75cfcc40178a6653425145b4e617850c73b9dbdbd8da7e85ab4fe7029181a8ef175d842067f20db3754640906cdda912c03c8d145b85402c9a5ba2a6a4646f355ee18a7996289aa983f7b8d9984ba8e8fae1c88412727d879cf69c9a"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x250000000000, 0x420000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 03:53:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x109800) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x3, 0x8, 0xffff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1483.381133] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1483.396501] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:19 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x9000000, 0x2000000000000057]}) 03:53:19 executing program 1: r0 = getpgid(0xffffffffffffffff) r1 = getpid() tgkill(r0, r1, 0xf) r2 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:19 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sync() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1483.505992] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1483.515132] CPU: 1 PID: 8259 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1483.522239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.531604] Call Trace: [ 1483.534213] dump_stack+0x1db/0x2d0 [ 1483.537873] ? dump_stack_print_info.cold+0x20/0x20 [ 1483.542910] handle_userfault.cold+0x3d/0x5c [ 1483.547343] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1483.551930] ? print_usage_bug+0xd0/0xd0 [ 1483.555992] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1483.561177] ? print_usage_bug+0xd0/0xd0 [ 1483.565238] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1483.570276] ? add_lock_to_list.isra.0+0x450/0x450 [ 1483.575220] ? __handle_mm_fault+0x4552/0x55a0 [ 1483.579834] ? find_held_lock+0x35/0x120 [ 1483.583894] ? __handle_mm_fault+0x4552/0x55a0 [ 1483.588498] ? lock_acquire+0x1db/0x570 [ 1483.592509] ? kasan_check_read+0x11/0x20 [ 1483.596662] ? do_raw_spin_unlock+0xa0/0x330 [ 1483.601088] ? do_raw_spin_trylock+0x270/0x270 [ 1483.605669] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1483.610807] __handle_mm_fault+0x4563/0x55a0 [ 1483.615255] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1483.620094] ? check_preemption_disabled+0x48/0x290 [ 1483.625122] ? handle_mm_fault+0x3cc/0xc80 [ 1483.629395] ? lock_downgrade+0x910/0x910 [ 1483.633553] ? kasan_check_read+0x11/0x20 [ 1483.637700] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1483.643027] ? rcu_read_unlock_special+0x380/0x380 [ 1483.647990] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1483.653559] ? check_preemption_disabled+0x48/0x290 [ 1483.658584] handle_mm_fault+0x4ec/0xc80 [ 1483.662681] ? __handle_mm_fault+0x55a0/0x55a0 [ 1483.667272] __do_page_fault+0x5da/0xd60 [ 1483.671340] do_page_fault+0xe6/0x7d8 [ 1483.675150] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1483.680090] ? vmalloc_sync_all+0x30/0x30 [ 1483.684275] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1483.689730] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1483.694675] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1483.699715] ? page_fault+0x8/0x30 [ 1483.703286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1483.708147] ? page_fault+0x8/0x30 [ 1483.711698] page_fault+0x1e/0x30 [ 1483.715172] RIP: 0033:0x451910 [ 1483.718394] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1483.737287] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1483.742658] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1483.749919] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1483.757188] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1483.764466] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1483.771784] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff [ 1483.781750] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:19 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) 03:53:19 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x1) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000140)=0x1) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x2) r2 = getpgrp(0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x3f, 0x4, 0x8, 0x5, 0x3, r2}) [ 1483.879056] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:19 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xb000000, 0x2000000000000057]}) 03:53:19 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x1000000000000006, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x2) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x1) 03:53:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="038adc96628f6e1e25910e429dbc7cf0d95dfd2134817605f636676495d18838e9b4e110e2efbeb19664c37b29da9649b0d21a5fc2b1f84bd3ae732d509520aa7e1e45f94f3b930a0ffa45db8b82678c900a306431285a5fda22b0d51e1110289a0db26099e4c3d0da72efdf09a7b5b210e6099262bd78c536af81385c8fb6e176edbbd9a7179ec57841dc7efdd8aa94dca44297d63942b2bea4a96b54acbea8d21cec1f280d0cbcdf6c3cd7a152047e394417af6c", 0xb5, 0x24048080, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) 03:53:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1484.023452] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1484.110676] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800000000) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000080)=""/62) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000011000/0x1000)=nil, 0x1000}) 03:53:19 executing program 1: r0 = socket$inet(0x2, 0x8, 0x40000fffd) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4000, 0x0) 03:53:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:19 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xc5, 0x800) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000002c0)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:19 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xc000000, 0x2000000000000057]}) [ 1484.230956] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:19 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0xd520688b78d480f7) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000002c0)={0x500, "7ba7c171d07e38b8dfc1d65f0af480fddf8a810c5300f6abea55bf52f385e9e2", 0x2, 0x1}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r0, &(0x7f0000000340)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1484.278984] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r0, 0x0, 0x0, 0x4090, 0x0, 0x0) 03:53:20 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xd000000, 0x2000000000000057]}) 03:53:20 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000030e3e200cc69d57af90e10505560a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000180)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) 03:53:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) accept4(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000080)=0x80, 0x80000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:20 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x10000000, 0x2000000000000057]}) [ 1485.149199] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1485.153844] CPU: 1 PID: 8327 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1485.160937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.170273] Call Trace: [ 1485.172849] dump_stack+0x1db/0x2d0 [ 1485.176465] ? dump_stack_print_info.cold+0x20/0x20 [ 1485.181479] handle_userfault.cold+0x3d/0x5c [ 1485.185885] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1485.190450] ? print_usage_bug+0xd0/0xd0 [ 1485.194519] ? futex_wait_setup+0x430/0x430 [ 1485.198840] ? print_usage_bug+0xd0/0xd0 [ 1485.202900] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1485.207902] ? add_lock_to_list.isra.0+0x450/0x450 [ 1485.212824] ? __handle_mm_fault+0x4552/0x55a0 [ 1485.217407] ? find_held_lock+0x35/0x120 [ 1485.221483] ? __handle_mm_fault+0x4552/0x55a0 [ 1485.226058] ? lock_acquire+0x1db/0x570 [ 1485.230037] ? kasan_check_read+0x11/0x20 [ 1485.234164] ? do_raw_spin_unlock+0xa0/0x330 [ 1485.238569] ? do_raw_spin_trylock+0x270/0x270 [ 1485.243133] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1485.248220] __handle_mm_fault+0x4563/0x55a0 [ 1485.252623] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1485.257447] ? check_preemption_disabled+0x48/0x290 [ 1485.262441] ? handle_mm_fault+0x3cc/0xc80 [ 1485.266675] ? lock_downgrade+0x910/0x910 [ 1485.270817] ? kasan_check_read+0x11/0x20 [ 1485.274944] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1485.280231] ? rcu_read_unlock_special+0x380/0x380 [ 1485.285147] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1485.290666] ? check_preemption_disabled+0x48/0x290 [ 1485.295678] handle_mm_fault+0x4ec/0xc80 [ 1485.299726] ? __handle_mm_fault+0x55a0/0x55a0 [ 1485.304315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1485.309848] ? vmacache_update+0x114/0x140 [ 1485.314084] __do_page_fault+0x5da/0xd60 [ 1485.318147] do_page_fault+0xe6/0x7d8 [ 1485.321930] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1485.326848] ? vmalloc_sync_all+0x30/0x30 [ 1485.330985] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1485.336430] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1485.341356] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1485.346352] ? page_fault+0x8/0x30 [ 1485.349876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1485.354706] ? page_fault+0x8/0x30 [ 1485.358228] page_fault+0x1e/0x30 [ 1485.361667] RIP: 0033:0x451910 [ 1485.364840] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1485.383719] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1485.389057] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e 03:53:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 03:53:21 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44090000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, r3, 0xa00, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x13000000, 0x2000000000000057]}) 03:53:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0xfffffffffffffffd) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x70c5d694, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:53:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1485.396316] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 [ 1485.403564] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1485.410808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1485.418053] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:21 executing program 1: socket$inet(0x2, 0x4000000000000002, 0x0) 03:53:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x14000000, 0x2000000000000057]}) 03:53:21 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @empty}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x73, 0x0, 0x0, 0x0) 03:53:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x20000000, 0x2000000000000057]}) [ 1485.641701] FAULT_FLAG_ALLOW_RETRY missing 70 [ 1485.646835] CPU: 0 PID: 8377 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1485.653935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.663296] Call Trace: [ 1485.665887] dump_stack+0x1db/0x2d0 [ 1485.669528] ? dump_stack_print_info.cold+0x20/0x20 [ 1485.674577] handle_userfault.cold+0x3d/0x5c [ 1485.679015] ? userfaultfd_ioctl+0x54e0/0x54e0 [ 1485.683599] ? print_usage_bug+0xd0/0xd0 [ 1485.687661] ? futex_wait_setup+0x430/0x430 03:53:21 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1485.691982] ? print_usage_bug+0xd0/0xd0 [ 1485.696051] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 1485.701080] ? add_lock_to_list.isra.0+0x450/0x450 [ 1485.706041] ? __handle_mm_fault+0x4552/0x55a0 [ 1485.710639] ? find_held_lock+0x35/0x120 [ 1485.714704] ? __handle_mm_fault+0x4552/0x55a0 [ 1485.719302] ? lock_acquire+0x1db/0x570 [ 1485.723282] ? kasan_check_read+0x11/0x20 [ 1485.727431] ? do_raw_spin_unlock+0xa0/0x330 [ 1485.731839] ? do_raw_spin_trylock+0x270/0x270 [ 1485.736420] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 03:53:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x20000040, 0x2000000000000057]}) [ 1485.741539] __handle_mm_fault+0x4563/0x55a0 [ 1485.745973] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1485.750839] ? check_preemption_disabled+0x48/0x290 [ 1485.755866] ? handle_mm_fault+0x3cc/0xc80 [ 1485.760126] ? lock_downgrade+0x910/0x910 [ 1485.764275] ? kasan_check_read+0x11/0x20 [ 1485.768419] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1485.773691] ? rcu_read_unlock_special+0x380/0x380 [ 1485.778649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1485.784180] ? check_preemption_disabled+0x48/0x290 [ 1485.789210] handle_mm_fault+0x4ec/0xc80 [ 1485.793267] ? __handle_mm_fault+0x55a0/0x55a0 [ 1485.797855] __do_page_fault+0x5da/0xd60 [ 1485.801945] do_page_fault+0xe6/0x7d8 [ 1485.805766] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1485.810695] ? vmalloc_sync_all+0x30/0x30 [ 1485.814838] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1485.820303] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1485.825234] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1485.830252] ? page_fault+0x8/0x30 [ 1485.833820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1485.838663] ? page_fault+0x8/0x30 03:53:21 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0xa, {{0xa, 0xfffffffffffffffd, 0x1ff, @loopback, 0x9}}}, 0xc8d334534c82b6ee) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1485.842199] page_fault+0x1e/0x30 [ 1485.845655] RIP: 0033:0x451910 [ 1485.848840] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 1485.867732] RSP: 002b:00007fc4decf67a8 EFLAGS: 00010202 [ 1485.873111] RAX: 00007fc4decf6850 RBX: 0000000000000003 RCX: 000000000000000e [ 1485.880373] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fc4decf6850 03:53:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x21000000, 0x2000000000000057]}) [ 1485.887640] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 1485.894924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1485.902209] R13: 00000000004c67c1 R14: 00000000004db950 R15: 00000000ffffffff 03:53:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x20100, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x80000, 0x0) sendmmsg$alg(r2, &(0x7f00000005c0), 0x0, 0x4040) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000300)) r3 = userfaultfd(0x0) syz_open_dev$video4linux(&(0x7f0000000580)='/dev/v4l-subdev#\x00', 0x8a62, 0x8000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x442880, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f00000000c0)={0x5, 0x43252c78, 0x8eb0}) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x4002, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000440)={r6, 0x9fd, 0x30, 0x97bb, 0x200}, &(0x7f0000000480)=0x18) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f00000001c0)={{0xffffffff, 0x80000000000, 0x5, 0x3f, 0x4, 0xfffffffffffffffd}, 0x80000000, 0x8, 0x4, 0x46, 0x7, "c0cf57986193a2c2f6910dbcc433468f0d1f6e30125fa274a9a40c43acf7eadeb8b651d02ce7250fc893876dd24cdc1c0880640fde23c530378a9f1c889ef64e66a0d00fab0800552ed0ce9e150b8ab6b7d882ffd49ce414759786e42700905265ccfeebd59a109643d7335cc0092dc1b4e367bae66f548ad7ad6243d9cc2d05"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000a00)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000000)={0x6, 0x1000, 0x10001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/-ev/input/event#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000011000/0x2000)=nil, 0x2000}) 03:53:21 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{}, {}, {0x20, 'GPL'}, {0x20, 'self%'}, {0x20, ',-'}, {0x20, '\''}, {}, {0x20, '}'}], 0xa, "77edd082463c4be1dcdfcf46df19ca8e160891efa04d7e0a3ead453512cd8ea307098ea5bb4c462d"}, 0x47) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000f8e63113411b937900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=""/4096, &(0x7f0000000140)=0x1000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340), &(0x7f0000000140)}, 0x20) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, &(0x7f0000000740)=0x8, 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sched_setparam(0x0, &(0x7f0000000400)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0xca, [], 0x0, &(0x7f0000000440), &(0x7f0000000480)=""/202}, &(0x7f0000000600)=0x78) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="000128bd7000fedbdf250b"], 0x1}, 0x1, 0x0, 0x0, 0x815}, 0x801) getpid() mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r2, 0x1e) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002700)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000002800)=0xe8) fcntl$getflags(0xffffffffffffffff, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002c40)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000003c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002c80)={{{@in=@dev}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000002d80)=0xe8) fcntl$getown(r0, 0x9) stat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r3, r4) r5 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x36000000, 0x2000000000000057]}) 03:53:21 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x14000000, 0x2000000000000057]}) 03:53:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:22 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x40000020, 0x2000000000000057]}) 03:53:22 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x100000000000, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r2, r3, 0xf, 0x2}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:22 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x7, &(0x7f0000002700)=[{&(0x7f00000002c0)="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", 0x1000, 0x7}, {&(0x7f00000012c0)="43dac8aed717897267d7f595ab93d162512fd192419e98abf2f80ff425d7c7cfc5c25877cb33a3a5b15dac0e5bc246f49685f00af0936c162a034ac2ed2d5ec649ad855e29cff8b12813a1", 0x4b, 0x7}, {&(0x7f00000013c0)="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", 0x1000, 0x1a}, {&(0x7f00000023c0)="767cf2ad5c21d99e17ed703d9cfaf9104098137ff9125702aba9f59f1a88edd9fc91a75e75c33223fa5c88fd29e807e4c27e4a1ea51b4e1aeaf2d7eca712fa852ef6123ef73c3540ff56c2f4591f1bc937e349a17443413a46da6b12ff8fb58d0f3e47f99a226f916f59ef41644585122affaea768872a5efe450c5f5c3f95e4f351f4cae0250e1ec16f49d52903339add98b447c79e6c217c969072cd34f9", 0x9f, 0x9}, {&(0x7f0000002480)="e278aca782b72280145ba7d58d1f9397ee3b222bc84a341f899d4db18c1f105e5e2b52755aca49c82086229d1f882f30b5e59756fe3a243414e67a93c1cb5a80df3d936d66b8485bcb822bc37727f23407b26db9f3f043a5dfcd8de55f2b6840485c1a826d6cdfc89a32dc42c9cb13e564c11232fd866c1185226b390f598dbfa5c8855af1f4c6cc1a0374332daee1208c2f0f1f", 0x94, 0x97}, {&(0x7f0000002540)="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", 0xff, 0x81}, {&(0x7f0000002640)="9459baa781e0afe56589678bddd25f3f5eb42935823135a36011ce6d05fed112efa3d448fedafbd29f02ef3a51cff9edcfc93f1975ff4ddf955207e67b743e42bb0bd1217e660d888d0dcefdf01976bd8f9e5ea0960c9bcf8032722cef073b496abe03e9f422a3f352dc2498a24385af8ca38326a6777af5f51347f53265d8a1dd999997", 0x84, 0x2}], 0x0, &(0x7f00000001c0)='-\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002900)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000002940)={0xffff, {{0x2, 0x4e20, @empty}}, 0x1, 0x2, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}]}, 0x190) accept4$inet6(r1, 0x0, &(0x7f0000002bc0), 0x800) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2000000000, 0x200000) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000001340)={0xfffffffffffffffd, 0x7, 0x6e, 0x8}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000027c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e2af28d9f8f5d4b1787280ce33b0164a6702a225d160dbadee75a4eda505c1e33550f41448c51"], 0x110) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002b40)={0x1, [0x0]}, &(0x7f0000002b80)=0x8) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000002b00)=[0x0, 0x1000]) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:22 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x40010000, 0x2000000000000057]}) 03:53:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x4001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) fstatfs(r1, &(0x7f0000000480)=""/68) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x0, 0x401, 0x80000000, 0xfff, 0x81, 0xffff, 0x5, 0x1000, 0x4, 0x100000001, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r2, 0x2}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000040)) 03:53:22 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000023000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2f7448f5736dc05dcb43c00d520e35f41fa6cfd8b654b694cdf7d2741aa74f042a96f4fcffc3da95e1eb807e51ea1"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:22 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x43050000, 0x2000000000000057]}) 03:53:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:22 executing program 1: r0 = socket$inet(0x2, 0x4000000001000000, 0xfffffffffffffffc) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:22 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x60000000, 0x2000000000000057]}) 03:53:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340), &(0x7f0000000140)}, 0x20) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, &(0x7f0000000740)=0x8, 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sched_setparam(0x0, &(0x7f0000000400)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0xca, [], 0x0, &(0x7f0000000440), &(0x7f0000000480)=""/202}, &(0x7f0000000600)=0x78) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="000128bd7000fedbdf250b"], 0x1}, 0x1, 0x0, 0x0, 0x815}, 0x801) getpid() mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r2, 0x1e) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002700)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000002800)=0xe8) fcntl$getflags(0xffffffffffffffff, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002c40)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000003c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002c80)={{{@in=@dev}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000002d80)=0xe8) fcntl$getown(r0, 0x9) stat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r3, r4) r5 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:22 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) read(r0, &(0x7f00000002c0)=""/223, 0xdf) r1 = shmget(0x1, 0x3000, 0x1800, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f00000003c0)=""/104) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r2, 0xff, 0xffffffffffffff81, &(0x7f0000000140)=""/71, &(0x7f00000001c0)=0x47) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:22 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x7ffff000, 0x2000000000000057]}) 03:53:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 03:53:22 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x800e0000, 0x2000000000000057]}) 03:53:22 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x96}, &(0x7f00000002c0)=0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000340)={0x0, 0x39555659, 0x100, 0xfffffffffffffe00, 0x2, @discrete={0x13, 0x798}}) 03:53:23 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000080)="a23ad4fe13d4d4297653144627cfb0c5692cd663f73da038a0462a6099c7a258b7e1a480acef9e2ad99b4c4112263eab95d7408aa90c2fe11b08c135b8687d85a6ddfeaf94e3c01519c7e1c83633c490512837cbc3813b343671df70867469a54336748a0e3fe7e0c0a3f27c55bdb5191e7226537a4dcf2ad142d6d406b347bfc0d95eb341bb2c8f9e03b1a8ec236fcbcf58794865b691f845449a9fdb9beff60a249e1c2e9528eefbac66c8ff78bc449c6e30cb03f1dc253ecde2", 0xbb) 03:53:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:23 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x80350000, 0x2000000000000057]}) 03:53:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:23 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x2, 0x1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4\x84v\x00/ig\x1a\x00r\x02\x00\x00\x00\x00\x00\x00\x00ed\x00\xb1!\xb9\xb3\x90O\xa5\xa0\x8c\x93\x03\xd6}\xec\x8e(\xb4\x9f\xef!\x1c\xbd\x10_\xc1{\xdbZ\xa9\xf2\xf2\x91\xa5\xdd\x90\xfd1\"\xc07\xeb7\xcehda\xd7\xd3\xdd\xaa\x01\xa3\x9d\xaa\x0449!\xf33[!v\xac\x89\xccv@`\xd6\xffkK\f\xc9~\xda\xc4\x00\x04\x00\x00\x00\x00\x00\x00\x10!\x7f\x19\xd3\b2\xe6\x96', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x220000, 0x0) ioctl$KVM_NMI(r3, 0xae9a) 03:53:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x101000) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000040)="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") 03:53:23 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x81000000, 0x2000000000000057]}) 03:53:23 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x86ddffff, 0x2000000000000057]}) 03:53:23 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r1) 03:53:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffc2f, 0x40, 0x0, 0x6b) 03:53:23 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x88470000, 0x2000000000000057]}) 03:53:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:24 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x200000000000000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a000000000000000000000000000000000000000000000100000000000000000000000000003c34847fda82926472857438000000000000000000000000f3ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) accept4$inet6(r0, 0x0, &(0x7f0000000140), 0x80000) 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20040) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x101, 0x7, 0x4, 0x80000}, {0x800, 0x1, 0x0, 0x8000}, {0x4, 0x0, 0x2, 0x7}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r1, &(0x7f0000000140)="b2ca0d13a1bda1c2ba7201c0bafb0870326d2ec6ec30136cd0948cd3ae4bc6df0af89436ce36c8e1b68f0abfeb5ec0f8d8f1747314d54b92ac2cf6ef95be3a34261a23f15a02dd583f6a4d7fe52c7562ccd602d7cf52e29fa2a93e68e3cdc2f9ff8edef98a2b5b751326613649080c8ba8493236ff6c944b0477ba78f9f4b4d4cc0741d4efb8208248200801ab70c21d905f7683f2d7f7d8da67d3ccce0b186dff1132a18ee085771789003cc47c8d5d8e28b1ddaa9d4c7613435484eb076d1293654a91f4f60497183ae0c1fad7353c", 0xd0, 0x804, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) 03:53:24 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x88480000, 0x2000000000000057]}) 03:53:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x5, 0x4800) write$FUSE_BMAP(r0, &(0x7f0000000440)={0x18, 0x0, 0x3, {0x9}}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x32, @rand_addr=0x5, 0x4e22, 0x0, 'rr\x00', 0x32, 0x14, 0xe}, {@loopback, 0x4e20, 0x10003, 0xff, 0x1, 0x3}}, 0x44) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x24e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x200, 0x0) accept4$netrom(r2, &(0x7f0000000340)={{0x3, @rose}, [@null, @netrom, @bcast, @rose, @rose, @rose, @default, @netrom]}, &(0x7f00000003c0)=0x48, 0x80000) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000500)=0x8000, 0x4) get_mempolicy(&(0x7f0000000480), &(0x7f00000004c0), 0x45beac7f, &(0x7f0000ffd000/0x2000)=nil, 0x1) 03:53:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1488.426156] net_ratelimit: 36 callbacks suppressed [ 1488.426165] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1488.463097] IPVS: set_ctl: invalid protocol: 50 0.0.0.5:20002 03:53:24 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1488.464504] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1488.475940] kernel msg: ebtables bug: please report to author: Wrong len argument 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x80000, 0xfff) 03:53:24 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x88640000, 0x2000000000000057]}) [ 1488.518659] IPVS: set_ctl: invalid protocol: 50 0.0.0.5:20002 [ 1488.550900] kernel msg: ebtables bug: please report to author: Wrong len argument 03:53:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x20001) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x80, 0x80000001, 0x9, 0x401, 0xe4, 0x2, 0x7}, 0x1c) r1 = inotify_init1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80200, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x800, 0x2, 0xfe, 0x10000}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') close(r1) preadv(r3, &(0x7f0000000480), 0x10000000000001cf, 0x0) 03:53:24 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000700000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1488.616272] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0xffffffda, "537614cfdd2a37875b3859e6dabf87c23fab101fbcd1161bd1edf4bb84ddf771e5bd223e37e27c11bb52365c1837a1b1af97ad0887bb92dee2e389da8e43e65d67bf1f2b1d01429bfb2079a13bf640e5aabe3b6351e8f225a0375da103a0136ecc7aec2248e7feebe12f17cbf01722caa3df26678638fc88e5fd063c5e41290283ce211a295498d64f1d"}, &(0x7f0000000100)=0x4ccff2f3bfe1febb) [ 1488.702809] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:24 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x88a8ffff, 0x2000000000000057]}) 03:53:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000016) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 03:53:24 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000ffa000/0x4000)=nil, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1488.960148] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1488.993469] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:24 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000002c0)={0x4e5, {{0x2, 0x4e21, @loopback}}}, 0x88) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000380)=""/4096) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84) 03:53:24 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x88caffff, 0x2000000000000057]}) [ 1489.215759] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:24 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe30, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xea1a, 0x8, 0x800, 0x18d}, {0x7b4, 0xbf2, 0x2, 0x4ce3}, {0x4, 0x1f, 0x800, 0x7}, {0x5, 0x6, 0x1, 0x400}]}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xc8, 0x4) [ 1489.279170] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:25 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x89060000, 0x2000000000000057]}) 03:53:25 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0xf, 0xffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e4b277400000000000000c7e0b9d58b4260b01563800d438934597439d5db0471b1f39ed331c23eb2b49e753b4aa7beff8dbaffacbb76b1f878a003f866570edb4e671afb191e25fa06e08a837ae5bc589a90ab2ad553510a66e7539a8792c320c39f8ff8dfac3f207f7dbdb330c4b3b42e43f8911832029c9683e919cb447af1b42ad443501ac1cfc04bbd86eb4d4bcc53050ed53193a1ddc9794e396d0be75e64b2f5eea3bc18da1e58c973e6f51b9dad9e320815e53daf05c15ea7060021f7886674fe8e9a069f897f79c146a1bce1d40000000000000000000000000000003c67ca8cb52c037599567b1492db8f3fd2af55b5f0131119061874aec8859103ce246e5448d1569a41dd53142a6bc47c10ed7c7a88151fa3eb0946e1886389319c855351c9828286d2d9bd34841e83665ccec9"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) accept4$x25(r1, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x80000) 03:53:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x20000) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00', 0xffffffffffffffff}, 0x30) ptrace$setregs(0x84985505612d6c32, r3, 0xec, &(0x7f00000001c0)="bd61704e86") r4 = accept(r1, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0xfe8c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xfffffffffffffec8, 0x5b68}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r6, 0xffb}, 0x8) 03:53:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1489.718411] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1489.735274] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:25 executing program 1: socket$inet(0x2, 0x5, 0x1888) r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:25 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000041000000000000000000000000000000000000000000000000000000000000e8180000000013774c5b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000f0ffffffffffffff0001000000000000000000000000000000000000000000000000000000000000000000000000000073f013d0efa43c72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:25 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xfeffffff, 0x2000000000000057]}) 03:53:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001240)='msdos\x00', &(0x7f0000001280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x4, 0x2, 0x80000001, 0x948, 0x3, 0xf2, 0x5, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x1, 0x401, 0x7, 0xfffffffffffffffe, 0x40}, &(0x7f00000000c0)=0x14) 03:53:25 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000002, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x1b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:25 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xffffa888, 0x2000000000000057]}) 03:53:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000400)) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3ff, 0x20000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x20000) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)={0x2cd2}) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffff26, 0x400200007ff, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000, &(0x7f0000000240)={[{@default_permissions='default_permissions'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}, {@euid_eq={'euid', 0x3d, r0}}, {@uid_eq={'uid', 0x3d, r1}}]}) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000b80), 0x24, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 03:53:25 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x400000, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0xe62, 0xf, 0x4, 0x20000000, {0x0, 0x7530}, {0x1, 0xe, 0x8001, 0x10001, 0x100000000, 0x8, "afde787d"}, 0x90, 0x3, @fd=r3, 0x4}) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000001c0), 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:25 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xffffca88, 0x2000000000000057]}) 03:53:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x600000, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000180)={0x1, 0x7, 0xffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) 03:53:26 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917}, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x1, 0x3, 0xedd4, 0xcafd, 0x0, 0x7, 0x40000, 0xc, 0x40, 0x6, 0x81, 0x2, 0x2, 0xa6, 0x81, 0xc87, 0x4, 0x1, 0x81, 0x9, 0x3, 0x381e, 0x8, 0x0, 0x6, 0x7fffffff, 0x1, 0x6, 0x5, 0x2f8, 0x7, 0x6, 0x4, 0x0, 0x1, 0x5c0, 0x0, 0x4fbf, 0x1, @perf_config_ext={0x9, 0xfffffffffffffff7}, 0x20, 0x7, 0xfffffffeffffffff, 0xf, 0x3ff, 0x5, 0x1ff}, r2, 0xa, r0, 0xa) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1601, 0x10000000002) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 03:53:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc8a36ae59c0298dd00f8cb97d6e1e489264db58e4fd54cd65f674eacea14123b29b55a05f5fb3e31836dcfb44ac514001d2cc570868a92d88d11bb3f081217a5efba1b338e4a7ef93a4653356dd8f70ace00150ecbb8c3dee9bb8649ccec30cfbebc0ba1bbe034e5cf197e672b968396ba9add07c1e2fe1fc2826c8f968b4324c4a70365cf62ad90d786c93f01b399ea14a51ed8f163751e6fdc2ffae5b95bc2e5ef19425a2659b38df6b48f1cf16dd4e8f86b4d7035b751d5b82ea2a5f969103da95d6f73044df07b07dfca057f668c4beac00cc12ac98ca"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) 03:53:26 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xffffdd86, 0x2000000000000057]}) 03:53:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a000000000000000000000000000000000000000000000100000000000000000000000000000000007900000000000000000000000000000000000000000000000000000000000000abe70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad273f8493a8b906e5d01736bc4a5a2a5662de8300f1a51b6c2210dc0380bb2a34c04207d550b4a4c40c75b027524d03482277bca233558728984761369b9af2d9942d1711e50aad14ed0acf"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:26 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xfffff000, 0x2000000000000057]}) 03:53:26 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x8100, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="97486b661585c17eaed707adcf3b9b941669388f43560f55bb3f43d602fccf67428ae4cdc23a2fa85c6c33c35427200f4eea4b81dd23ba76175ab068f2bd0825e8d0170a37facf13e000db4b8d7847b356ff0b5da19737b816e9a3774b9990c422f9874e95c1a882f681256b8cd752", 0x6f) r1 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000000c0)={0x1, 0x10, 0x1, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$xdp(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, 0x2, r4, 0x38}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="583a17f6345037943144d30e0084bf7cfb6bb7340f27e58d5608af8b650ac2de61cd5ae77a838dd10834ab75b40938806229e7de1f830084edf29ce5c20f4eebec75b9c50757c66cb1d407d6697869158989ccc1915b865cc1a83b2154fd8f89cead00618b0dc9e59938", 0x6a}, {&(0x7f0000000200)="12a051b00fdb9ba4c77fcfff30783efeb78bcca1d58102535482de5c01649f12815390c1a60a633be1ea4fa0eb51f0d7c9dea2afcf97075d85003cb1c3622162f39d8de8ae5f3f2c565b803704a6a0c90ee7208b26f4dfc700dd57b8576ae8083f59319838ecb433247ec406b50b45b931fda93fa44f4b8a5faa1d9de5d3975871433f41c80f1fc54f17097a9c4963e88acbbfea52f5967d6d0da0edb97b443f3951e7ee403b6d67dbf2366097fd3174e95773626ab1", 0xfffffffffffffcc8}], 0x2}, 0x11) r5 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:53:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000040a00000000000000ff0100000000000000000000000000010000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000aadd149a000000000040000000000000000000010000000a0000000000000000000000000000000000000000000001000000923cbd490f8251c6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:26 executing program 4 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:26 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xfffffffe, 0x2000000000000057]}) 03:53:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) recvfrom$unix(r1, &(0x7f00000002c0)=""/204, 0xcc, 0x100, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:26 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xf0ff7f00000000, 0x2000000000000057]}) [ 1491.318878] FAULT_INJECTION: forcing a failure. [ 1491.318878] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.345458] CPU: 1 PID: 8779 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #21 [ 1491.352588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.362402] Call Trace: [ 1491.364993] dump_stack+0x1db/0x2d0 [ 1491.368629] ? dump_stack_print_info.cold+0x20/0x20 [ 1491.373651] ? print_usage_bug+0xd0/0xd0 [ 1491.377738] ? do_raw_spin_unlock+0xa0/0x330 [ 1491.382166] ? trace_hardirqs_on_caller+0x310/0x310 [ 1491.387216] should_fail.cold+0xa/0x15 [ 1491.391106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1491.396239] ? check_preemption_disabled+0x48/0x290 [ 1491.401285] ? kfree_skbmem+0x100/0x230 [ 1491.405271] __should_failslab+0x121/0x190 [ 1491.409523] should_failslab+0x9/0x14 [ 1491.413327] kmem_cache_alloc_node+0x56/0x710 [ 1491.417845] ? kfree_skbmem+0x105/0x230 [ 1491.421825] ? pskb_put+0xa0/0xa0 [ 1491.425296] __alloc_skb+0xf4/0x730 [ 1491.428975] ? skb_scrub_packet+0x440/0x440 [ 1491.433306] ? __kfree_skb+0x30/0x30 [ 1491.437041] ? __lock_is_held+0xb6/0x140 [ 1491.441142] tipc_buf_acquire+0x2f/0x100 [ 1491.445214] tipc_msg_create+0x38/0x270 [ 1491.449208] tipc_sk_send_ack+0x19b/0x4e0 [ 1491.453367] ? tipc_sk_set_orig_addr.isra.0+0x4ba/0x5e0 [ 1491.458747] tipc_recvstream+0x8aa/0x9f0 [ 1491.462859] ? tipc_recvmsg+0xd10/0xd10 [ 1491.466846] ? security_socket_recvmsg+0x9b/0xd0 [ 1491.471604] ? tipc_recvmsg+0xd10/0xd10 [ 1491.475591] sock_recvmsg+0xd0/0x110 [ 1491.479310] ? __sock_recv_ts_and_drops+0x410/0x410 [ 1491.484332] ___sys_recvmsg+0x2a8/0x680 [ 1491.488336] ? ___sys_sendmsg+0x910/0x910 [ 1491.492525] ? lock_downgrade+0x910/0x910 [ 1491.496695] ? __fget_light+0x2db/0x420 [ 1491.500678] ? fget_raw+0x20/0x20 [ 1491.504147] ? __mutex_unlock_slowpath+0x195/0x870 [ 1491.509093] ? wait_for_completion+0x810/0x810 [ 1491.513690] ? __fdget+0x1b/0x20 03:53:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="1e124442ae3ac22735d5555bf30a3853cebf6d16a82b4af81171adccbc1aba09d687823d0abb726e5c51c754bfea562b008f24e84da4e506cfb68a1ef71428bc714b71f69cbaadc7ee84871a743dcfaa4544d03ac8e7e026f6fce89853c57e2fcfeba00759fd7005efbb475ab60db81b7370feb88f9b05cc49048752971dfd61388920914e0879f5f80f993b4f937c7564", 0x91}, {&(0x7f00000003c0)="c397b0f4a7f5349522ce4de7a60a66d09353de05bb23b0db010901f08689796b5952e6c334e19c8e6204ef60d3c559e5e8b871ba9054d3cfa37771f4337bc866bec773756a1b2a8d637d232202e9672a7a0821e768e4536d8280c87567cae1475245c8dcbe85e4d98f4ea55169905f27010a48ec06123cc81a57440c77ecbc65b6a896ea56d980c480561a461280ec0349b37d006894779b11e743d21ee45c9766ba884df74e4ac5ec9d566599a6c7a93364a283f78efffa2b15e7a826925e4aee4583eee0728a", 0xc7}, {&(0x7f00000004c0)="f1f655016d47a127bb708c44d86b4cfd82d3306d0e712860199dd8737b38559eb08063ef91fc1023fd54f33c43354a8ce97d64f6791a49a8107d8a82337f6a3e7127ce5c1c4e58081f65f2d4b02e4e2beacdd0ede6ae960a85051183bc128ac473ff95ec547c0b99cbc7c7764ab2cb23fe25ad67f90c1b3f29be70a021a1bc3dc3ff3024ace3b3e36799015ec84b042cba2de4ae606ae468b8a5eafb290d8f73987c2ee69a26afb9e221bf3ba5c98ec5f44a19798032b86a12c194f635f3a9f24b4028", 0xc3}, {&(0x7f00000002c0)="d9059554daf5e36714e3105bfc79f71ed785d3a82db49f61bc09574018904b3f0cf36f58d68114e3b4a647cafff98f091198b39627a4aeb9b8c0a705ba6ad50c85b06db8c435cd7e698b17bfb6c3171572ec20cde1391194850607595ab3aa182c9bce76eea0c83a23accab10f88d7dea0f529cd0b7e5a3a4a73485ac8d6ec16d5f770fe02129ca7bc3ae8b66b9f97e436392f1561db6c04f3cc5a", 0x9b}, {&(0x7f0000000100)="f43fab060f75c158dd722043dfe66f93a5e417116515cc4fc8e2cfc88536aecdf84714943522cd0adc713439b3277bdbec707b63d70f8f35f4ea19521460374b7ff3bec36d73c99bd72b1690631f06a751f379957d17025bc907ce7d25c80f725f69ea2924a21568c6d96a1ae77ebbf08d", 0x71}], 0x5, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x4058534c, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:53:27 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xf0ffffffffffff, 0x2000000000000057]}) 03:53:27 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0xa48, 0x400000) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000240)={0x9, 0x3f, 0x8, 0x100000001, 0x6, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000280)={0x0, @speck128}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e97b985ea896d8cd1262a223ec5dc02d00000000000000000000000000000000010000000a00000000000000010000df3d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edfd789dd9000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x400, @loopback, 0x8000000000}}}, 0x88) [ 1491.517068] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1491.522615] ? sockfd_lookup_light+0xc2/0x160 [ 1491.527135] __sys_recvmsg+0x10f/0x270 [ 1491.531036] ? __ia32_sys_sendmmsg+0x100/0x100 [ 1491.535641] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1491.541027] ? trace_hardirqs_off_caller+0x300/0x300 [ 1491.546164] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1491.550930] __x64_sys_recvmsg+0x78/0xb0 [ 1491.555001] do_syscall_64+0x1a3/0x800 [ 1491.558904] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1491.563850] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1491.568875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1491.573739] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1491.578933] RIP: 0033:0x457ec9 [ 1491.582136] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1491.601051] RSP: 002b:00007f2692ee1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1491.601088] RAX: ffffffffffffffda RBX: 00007f2692ee1c90 RCX: 0000000000457ec9 03:53:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000000, 0x8) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x280, @time={0x0, 0x1c9c380}, 0x9, {0x7, 0x3f}, 0x4, 0x2, 0x9}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1491.601097] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004 [ 1491.601106] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1491.601114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2692ee26d4 [ 1491.601127] R13: 00000000004c4a68 R14: 00000000004d8158 R15: 0000000000000006 03:53:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:27 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x100000000000000, 0x2000000000000057]}) 03:53:27 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x284000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000003c0)={{0x2, 0x3, 0x5, 0x0, 0x3}, 0x47e0, 0xfffffffffffffffb, 0x10000}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x8) prctl$PR_GET_NAME(0x10, &(0x7f00000002c0)=""/207) signalfd(r0, &(0x7f00000001c0)={0xf42}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x26) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x2, 0x3, 0x9, 0x0, 0x5]}, 0xe) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0xf93f00, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x1, 0x9, [@dev={[], 0x10}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={[], 0x11}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @remote, @remote, @local]}) tkill(r1, 0x12) gettid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000000)="80", 0x1}], 0x1) 03:53:27 executing program 4 (fault-call:7 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0x352d, 0x0, 0xc4, 0x31e15860}, &(0x7f00000000c0)=0x18) 03:53:27 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x200000000000000, 0x2000000000000057]}) 03:53:27 executing program 0: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000700)='\x00\x00\x00\x00\x02\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\xf8\xa2W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x99\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\x00`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xf9\xff\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00@\xde\xca3o\xb5(\xb5\x98\xdc*/=\x9d\xe8E\xd7\xb7\xd9\x9c\xeb\x82\xcd\x14 GLHi\x82\x8e\xa1\x922\xbar\xb2\xccGt\xe8\x98$!/\x8f\xd4_\xdb\x90\xf1\x83\xfb\xe78\xd1\xf8\x8f\xa7\xf06\xb5x!\x85@\x87\xd1M=\xf3\x814\x88,r', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:nodev 0000000000000000405'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101080, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00', {0x2, 0x0, @rand_addr=0xfeffffff}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000500)) 03:53:27 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000005, 0x2010, r0, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000dd1bb6ff08a29f7f0000000000000000000000000000000000000000e87500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000002c0)=0x48) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5, 0x40) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x8) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1492.214935] FAULT_INJECTION: forcing a failure. [ 1492.214935] name failslab, interval 1, probability 0, space 0, times 0 03:53:27 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x300000000000000, 0x2000000000000057]}) [ 1492.291649] CPU: 1 PID: 8836 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #21 [ 1492.298782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.308139] Call Trace: [ 1492.310735] dump_stack+0x1db/0x2d0 [ 1492.314380] ? dump_stack_print_info.cold+0x20/0x20 [ 1492.319407] ? save_stack+0x45/0xd0 [ 1492.323046] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1492.328160] ? kasan_slab_alloc+0xf/0x20 [ 1492.332247] ? kmem_cache_alloc_node+0x144/0x710 [ 1492.337028] ? __alloc_skb+0xf4/0x730 [ 1492.340840] ? tipc_msg_create+0x38/0x270 [ 1492.344998] should_fail.cold+0xa/0x15 [ 1492.348898] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1492.354008] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1492.359123] ? should_fail+0x1e6/0xd22 [ 1492.363024] ? add_lock_to_list.isra.0+0x450/0x450 [ 1492.367966] ? add_lock_to_list.isra.0+0x450/0x450 [ 1492.372918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1492.378474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1492.384023] ? check_preemption_disabled+0x48/0x290 [ 1492.389078] __should_failslab+0x121/0x190 [ 1492.393317] should_failslab+0x9/0x14 [ 1492.397121] kmem_cache_alloc_node_trace+0x5a/0x720 [ 1492.402204] ? __alloc_skb+0xf4/0x730 [ 1492.406060] __kmalloc_node_track_caller+0x3d/0x70 [ 1492.410999] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1492.415707] __alloc_skb+0x12d/0x730 [ 1492.419433] ? skb_scrub_packet+0x440/0x440 [ 1492.423759] ? __kfree_skb+0x30/0x30 [ 1492.427478] ? __lock_is_held+0xb6/0x140 [ 1492.431574] tipc_buf_acquire+0x2f/0x100 [ 1492.435650] tipc_msg_create+0x38/0x270 [ 1492.439637] tipc_sk_send_ack+0x19b/0x4e0 [ 1492.443787] ? tipc_sk_set_orig_addr.isra.0+0x4ba/0x5e0 [ 1492.449156] tipc_recvstream+0x8aa/0x9f0 [ 1492.453230] ? tipc_recvmsg+0xd10/0xd10 [ 1492.457216] ? security_socket_recvmsg+0x9b/0xd0 [ 1492.461982] ? tipc_recvmsg+0xd10/0xd10 [ 1492.465962] sock_recvmsg+0xd0/0x110 [ 1492.469684] ? __sock_recv_ts_and_drops+0x410/0x410 [ 1492.474703] ___sys_recvmsg+0x2a8/0x680 [ 1492.478690] ? ___sys_sendmsg+0x910/0x910 [ 1492.482858] ? lock_downgrade+0x910/0x910 [ 1492.487016] ? __fget_light+0x2db/0x420 03:53:27 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x400000000000000, 0x2000000000000057]}) [ 1492.491017] ? fget_raw+0x20/0x20 [ 1492.494519] ? __mutex_unlock_slowpath+0x195/0x870 [ 1492.499481] ? wait_for_completion+0x810/0x810 [ 1492.504122] ? __fdget+0x1b/0x20 [ 1492.507508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1492.513055] ? sockfd_lookup_light+0xc2/0x160 [ 1492.517561] __sys_recvmsg+0x10f/0x270 [ 1492.521459] ? __ia32_sys_sendmmsg+0x100/0x100 [ 1492.526065] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1492.531436] ? trace_hardirqs_off_caller+0x300/0x300 [ 1492.536550] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1492.541319] __x64_sys_recvmsg+0x78/0xb0 [ 1492.545390] do_syscall_64+0x1a3/0x800 [ 1492.549292] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1492.554232] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1492.559270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1492.564152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1492.569346] RIP: 0033:0x457ec9 [ 1492.572549] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1492.591452] RSP: 002b:00007f2692ee1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1492.599180] RAX: ffffffffffffffda RBX: 00007f2692ee1c90 RCX: 0000000000457ec9 [ 1492.606473] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004 [ 1492.613751] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1492.621038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2692ee26d4 [ 1492.628328] R13: 00000000004c4a68 R14: 00000000004d8158 R15: 0000000000000006 03:53:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:28 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x500000000000000, 0x2000000000000057]}) 03:53:28 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200000, 0x0) write$P9_RSTAT(r1, &(0x7f0000000180)={0x42, 0x7d, 0x2, {0x0, 0x3b, 0x7, 0x100, {0x1, 0x0, 0x7}, 0x1000000, 0x976a, 0x3, 0x6, 0x1, '-', 0x0, '', 0x0, '', 0x7, 'keyring'}}, 0x42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) 03:53:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3ff, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto(r0, &(0x7f0000001180)="8a", 0x1, 0x20048040, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80) readv(r0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0xb0, 0xe4, 0x8002, 0x0, 0x9, 0x0, 0x9, 0x7c71b77, r2}, &(0x7f0000000280)=0x20) r3 = dup3(r1, r1, 0x80000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000340)={0x5}, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)=ANY=[@ANYBLOB="14000000220001000000000000002d28e841f025"], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x200000000020, 0x8000}, &(0x7f00000001c0)=0x10) lseek(0xffffffffffffffff, 0x8, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x0, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7}}, &(0x7f0000000400)=0xb0) ioctl$void(r4, 0xc0045878) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009080)={0x0, 0x7}, &(0x7f00000090c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000009100)=ANY=[], &(0x7f0000009140)) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) 03:53:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:28 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x400, 0x40242) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20201, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x8, 0x2}, 0x14) r2 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:28 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x600000000000000, 0x2000000000000057]}) 03:53:28 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1}}}, 0x2d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:28 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x700000000000000, 0x2000000000000057]}) 03:53:28 executing program 5: r0 = socket$inet6(0xa, 0x800, 0x80000000a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x9, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 03:53:28 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x62200, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000040)=""/189) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x219, 0x0, 0x0, 0x0) 03:53:28 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x940, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xeta-generic)\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) [ 1493.355689] IPVS: ftp: loaded support on port[0] = 21 03:53:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:29 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x800000000000000, 0x2000000000000057]}) 03:53:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={&(0x7f0000000040)="f6cc37414e33c87c557c68560d84355ca73b5658734c339cd0d050df7d9e3fc87b49a7a2987c4f540323560d267b81f133ccad4663e7d433a8e3fc4e648d3e2545b962d9d96b3b1b1e436ecdaf73c4cb9b22647579cb40cbba1df89f4d2adfa374511d150a0524", &(0x7f00000000c0)="1ebeb4d976adb02318ecdd0d4c6f74de5e4d724166c6ac0bdaf4c11b0029a8ebfe7bc93e6d0340abc82dd2c21055b11d5caf8365eeb45fd1a0706797316b4c8fadc3326d27cbb5faa3776be7895d1dfc443ea0da3f81b4c83b29dd4e"}}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:53:29 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) [ 1493.530459] net_ratelimit: 30 callbacks suppressed [ 1493.530469] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1493.605820] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:29 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x101000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000002c0)={0x7, @capture={0x1000, 0x1, {0x1f44c000000000, 0x3}, 0x2, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:29 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x806000000000000, 0x2000000000000057]}) 03:53:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) 03:53:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:29 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@dev, @initdev}, &(0x7f00000000c0)=0xc) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x50, 0x0, 0xfffffffffffffca1) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2200) 03:53:29 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1493.795577] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1493.824973] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:29 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x900000000000000, 0x2000000000000057]}) [ 1493.976325] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1494.035685] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4010, 0x20000) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401200) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x400000000000063, 0x2}], 0x1f6) 03:53:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:29 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x2c4, 0xfffffffffffffffe, 0x0, 0x0) 03:53:29 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xb00000000000000, 0x2000000000000057]}) 03:53:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) [ 1494.228208] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1494.254821] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:29 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xc00000000000000, 0x2000000000000057]}) 03:53:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x9, 0x4) 03:53:29 executing program 0: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f00000000c0)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r2) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000080)="05a6c25456b620a759bb7caaec7655242317f606be40816b7f3f73e1182c717e3dc183c9c3ccb6da83855a85b7bdc3d46c1498b5047f62", 0x37) ptrace(0x8, r2) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000180)={'nr0\x00', 0x4}) clock_adjtime(0x0, &(0x7f00000001c0)={0x200, 0x7, 0x0, 0xffffffffffffff81, 0x7, 0x9, 0x100, 0x1e, 0x0, 0x9, 0x3b, 0x7, 0x0, 0x0, 0x5, 0xa73, 0xfff, 0x6, 0x8001, 0x2cd, 0x0, 0x3, 0x7, 0x7, 0x100000000, 0x2d11}) 03:53:30 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1494.398605] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1494.477509] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x3, @rand_addr="e33d1793d8aa49b54a2282548a272bae", 0x7}}, [0x3, 0x100000001, 0x0, 0x2c80000000000, 0xef, 0x8, 0x41, 0x632, 0x7f69, 0xa4, 0x9, 0x80000001, 0x0, 0x2, 0x1]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x7, @ipv4={[], [], @empty}, 0xffffffffffffff85}}}, 0x84) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x7, 0x5, [{0x53fe116e, 0x0, 0x101}, {0x1, 0x0, 0x7241d332}, {0xff, 0x0, 0x6}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x400}, {0x40, 0x0, 0x2}, {0xc35, 0x0, 0x1}]}) 03:53:30 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCSCTTY(r2, 0x540e, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:30 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xd00000000000000, 0x2000000000000057]}) 03:53:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000300)={0x1, @capture={0x1000, 0x1, {0x8}, 0x2ce, 0x8}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x1b8}, 0x8) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x4004550d, 0x0) clock_adjtime(0x0, 0x0) close(r1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0a42105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423737ae8617edf7b8a2d1dff4efee39b224493b7e00fee309bb5ff84c5302046e2348a56c1b13b5874b620a5d49f9d"], 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x10002, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100323, 0x2}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) 03:53:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0xb0, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xac}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x7fffffff, @local, 0x6}, @in={0x2, 0x4e21}]}, &(0x7f0000000180)=0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f00000001c0)=0x0) io_destroy(r2) 03:53:30 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1000000000000000, 0x2000000000000057]}) 03:53:30 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x40, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x801, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180)={0x1ff, 0xffff, 0xffffffff, 0x4}, 0x6) fcntl$addseals(r1, 0x409, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x802, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:30 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x41) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000180)=0x401, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:30 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1300000000000000, 0x2000000000000057]}) 03:53:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x57, 0x8, 0x200, {0x3, 0x9}, {0xea4, 0xa4}, @ramp={0x9, 0x6, {0x80000001, 0x8, 0x100000001, 0x91}}}) 03:53:30 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@rand_addr=0xc5f7, 0x4e22, 0x2562, 0x4e21, 0x4, 0xa, 0x80, 0xa0, 0x3f, r1, r2}, {0xd3, 0x7, 0xffffffff, 0x7, 0x5, 0x0, 0x27, 0x8}, {0x100000001, 0x351d, 0x2, 0x1000}, 0xffffffffffffffff, 0x6e6bba, 0x0, 0x0, 0x1, 0x3}, {{@in=@rand_addr=0x8, 0x4d6, 0x3b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x18}, 0x3500, 0x0, 0x0, 0x6, 0x4, 0x49, 0x8}}, 0xe8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) r1 = dup(r0) bind$netrom(r1, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:30 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1400000000000000, 0x2000000000000057]}) 03:53:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000300)={0x1, @capture={0x1000, 0x1, {0x8}, 0x2ce, 0x8}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x1b8}, 0x8) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x4004550d, 0x0) clock_adjtime(0x0, 0x0) close(r1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0a42105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423737ae8617edf7b8a2d1dff4efee39b224493b7e00fee309bb5ff84c5302046e2348a56c1b13b5874b620a5d49f9d"], 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x10002, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100323, 0x2}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) 03:53:31 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80800, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0xbd, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000080)=""/189}, &(0x7f00000001c0)=0x78) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:31 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x7b, "0e22e0f9f99d1778ff4fec4a9dc63dfa6140ca99a1fa97a51de596fa9cdaa3fde288a2c5a4d54a23f5963c5d479f49971e70099d27acc7aede7f637247559303603f5fcb9d48798b9a13a1c2acfadc5822caf86b60a603db6cb66f56ada808eba61dc1c8d2af1b3514a8769f7ecaf64571a1f6565c6f9747758552"}, &(0x7f00000001c0)=0x83) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, [0x1f, 0x5, 0x4, 0x0, 0x7fffffff, 0x7, 0x200, 0x789e, 0xfff, 0xffffffffffffffe0, 0x1376, 0x8a, 0x8, 0x160e, 0x1]}, &(0x7f0000000480)=0x100) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000180)=0x10001, 0x4) 03:53:31 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x2000000000000000, 0x2000000000000057]}) 03:53:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x50000, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:31 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x2100000000000000, 0x2000000000000057]}) 03:53:31 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0x3fd) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed3b1b84c3e72143268c70f61c8dbd249f93a6bffd07604a633f"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6, 0x3ff, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8072, 0x4, 0x6, 0x9, 0xfffffffffffffffd, 0x8e1, 0x8, 0x5, 0xfec4, 0x2, 0x0, 0x686, 0x5, 0x2, 0x0, 0xfff, 0x10000, 0x18, 0x8, 0x8, 0x0, 0x6, 0x4, 0xfffffffffffffc20, 0x0, 0x8, 0xf0, 0x1ae, 0x2, 0x4, 0x0, 0xffff, 0x2, @perf_config_ext={0x80000, 0x5}, 0x0, 0x8, 0x9, 0x9, 0xff, 0x2000000000000000, 0x3}, r1, 0xffffffffffffffff, r2, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:31 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x3600000000000000, 0x2000000000000057]}) 03:53:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x3}, 0x10) 03:53:31 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:32 executing program 0: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000404}) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000000c0)=r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1f, 0x40) fcntl$setpipe(r1, 0x407, 0x9) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x6, 0x7, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) 03:53:32 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4000002000000000, 0x2000000000000057]}) 03:53:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) chdir(&(0x7f0000000000)='./file0\x00') sendto$inet(r0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0) 03:53:32 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x1, 0x7, @loopback, 0x9}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x7ffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:32 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4001000000000000, 0x2000000000000057]}) 03:53:32 executing program 1: r0 = socket(0x1f, 0x0, 0xcd) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={r1, 0x7, 0x8, "c99e19899c2500ccbe433d545537c8b2bf2af8e042a636ec59f6df85862e1b9d9460a15dc9ef898e8311ea70e2290c459fb5393ff99cd823b9bbde4feabf373429025d3a473692b15f5d0f0450e637ad33235dca0a17484fe12af1d03abb9da618d0c7a0d3ccb895d879a0e9824e0d1fc71434941a0b3073d62a15353498036535589698234dcbb221dbb2a6346d5b70ce2f4c74638fba8988bed96a1115cc57aaa53faf0e432cfdde013fb9b1dd50ae2f54811921b3"}) socket$inet(0x2, 0x4000000000000002, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 03:53:32 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0xc24) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x50000, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448e0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001fc0)={0x0, 0x2}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002040)=@assoc_value={r3, 0x8}, 0x8) r4 = dup(r0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x7, 0x8000, 0x8001}) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000001f00)=""/168) sendmsg$rds(r4, &(0x7f0000001ec0)={&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/7, 0x7}], 0xa, &(0x7f0000001d00)=ANY=[@ANYBLOB="58000000000000001401000009000000a84a000004000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="0500000000000000"], @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="0300000000000000"], @ANYBLOB="bd0d00000000000000000100000000000500000000000000030000000000000004000000000000003eff000000000000580000000000000014010000070000000300000004000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0200000000000000"], @ANYBLOB="00fcffffffffffff0004000000000000030000000000000007000000000000002000000000000000244d000000000000480000000000000014010000010000000900000000000000", @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='t\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="a800000000000000", @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f700000000000000", @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='>\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e300000000000000"], @ANYBLOB="0500000000000000000000000000000003000000000000005800000000000000140100000700000005000000fdffffff", @ANYPTR=&(0x7f0000000c00)=ANY=[@ANYBLOB="fa0f000000000000"], @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="8000000000000000"], @ANYBLOB="0000008000000000ff010000000000000800000000000000020000000000000010000000000000000200000000000000480000000000000014010000010000000000070001000000", @ANYPTR=&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001cc0)=ANY=[@ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000"], @ANYBLOB="010000000000000000000000000000000600000000000000"], 0x198, 0x4085}, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000840)={0x1, 0x1, [0x80000000, 0x800, 0x1, 0x266, 0x4, 0x4, 0xfffffffffbaf5f12]}) 03:53:32 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x4305000000000000, 0x2000000000000057]}) 03:53:32 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:32 executing program 1: r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:32 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x6000000000000000, 0x2000000000000057]}) 03:53:32 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x604400, 0x0) recvfrom$rose(r1, &(0x7f00000002c0)=""/169, 0xa9, 0x12123, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x4, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x3, @loopback={0x0, 0x300}}}}, 0x108) 03:53:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') socket$tipc(0x1e, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x27}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8081) 03:53:33 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000013c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe80000000000000000000000000000e0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000002c0)=""/4096, &(0x7f0000000140)=0x1000) 03:53:33 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x800e000000000000, 0x2000000000000057]}) 03:53:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x200, {0x6, 0x7, 0x2, 0x8000, 0xd782, 0xe94b}, 0x40, 0x7}, 0xe) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) 03:53:33 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8035000000000000, 0x2000000000000057]}) [ 1497.590924] binder: 9213:9217 Acquire 1 refcount change on invalid ref 0 ret -22 03:53:33 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x42) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/13) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x3, 0x4, 0x8001, 0x100000001, 0x3, 0x0]}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100), 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) getpgrp(r2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000200)={0x200, 0x66000000}) r4 = socket$inet(0x2, 0x4000000000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', r1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:33 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x800, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) [ 1497.637427] binder: 9213:9226 Acquire 1 refcount change on invalid ref 0 ret -22 03:53:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x7f, 0x7, 0xf7ce, 0x69b8, 0x0, 0x3, 0x20024, 0x2, 0x7, 0x1, 0x3, 0x3, 0x1, 0xfffffffffffffffe, 0x8, 0x8, 0x4, 0xfff, 0xdc, 0x0, 0x3, 0x7fffffff, 0x3, 0xffff, 0x8, 0x6, 0x2, 0x8, 0x4, 0x0, 0x7, 0x7f, 0x8, 0x200, 0x7, 0x5, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4030, 0x2815, 0x9, 0x7, 0x2, 0x191, 0x1}, r3, 0xffffffffffffffff, r0, 0x8) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000300)=""/148) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000600)={{0x0, 0x1, 0xa, 0x4, 0x4, 0x1, 0x5, 0x6, 0x80000000, 0x1f, 0x97c6}, {0x100000, 0xf004, 0x4, 0xff, 0xff, 0x6, 0x1, 0xffff, 0x9, 0x81, 0x7, 0x2}, {0xd000, 0x100000, 0xd, 0x5, 0x9, 0x2, 0x7204, 0xffff, 0x5, 0x1, 0x3, 0x1}, {0x6000, 0x10000, 0x9, 0x80000000, 0x8, 0x6, 0x795a001f, 0x8, 0x9, 0x6, 0xd4, 0x6}, {0x0, 0x10d002, 0xd, 0xfff, 0x9, 0x51d6, 0xffffffffffff1cf7, 0x1, 0x3302, 0x1, 0x8, 0x7fff}, {0x5000, 0x0, 0xf, 0x7, 0x3, 0xad, 0x662f, 0x81, 0x9, 0xc0d, 0xba, 0x7}, {0x14002, 0x7000, 0xb, 0x40, 0xdf1, 0x100000000, 0x55, 0x6, 0x45, 0x5, 0x7fff, 0xfe00000000000000}, {0x3000, 0x5002, 0x10, 0xffffffffffff0000, 0xa3, 0x2, 0xffffffffffffffc1, 0x8, 0x9, 0x10001, 0x6}, {0x5002, 0xf000}, {0x0, 0x4}, 0x20000008, 0x0, 0xf000, 0x1, 0x0, 0x4000, 0x0, [0x100000001, 0x7ac, 0x5, 0x4c6c]}) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) keyctl$update(0x2, 0x0, &(0x7f0000000580)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000240)) fdatasync(r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchmod(0xffffffffffffffff, 0x20) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000000c0)=0xb4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={0x0, 0x8, 0x2, 0x80000002, &(0x7f0000f2f000/0x3000)=nil, 0x6}) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x1000000000000081) 03:53:33 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8100000000000000, 0x2000000000000057]}) [ 1497.740167] Unknown ioctl 28688 03:53:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x1a}, 0x5}}, 0x4, 0x0, 0x81, 0x81, 0x2}, 0x98) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1497.778736] Unknown ioctl 28688 03:53:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:33 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r2) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffffffffffe, @loopback={0x0, 0x300}}}}, 0x108) 03:53:33 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x86ddffff00000000, 0x2000000000000057]}) 03:53:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x101, 0x400801) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001b40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xffffffffffffff99, 0x2, "0ef1c35fd925286ea540cf3d1042d188d3b5c1a3560683baf9ceafe1b0e2f1fb4707c685eda781a9f4cd83e34c2977fcdca6d331f43f2dfc5c210c21500f4c", 0x32}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @remote}}, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(r1, 0x0, 0x33863160941badd7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000540)={0x0, @reserved}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000003c0)="7ea140d4628d449cf303a081c56027ccd6dc256a4d08bbd7b6fd474f0bfc3e9566853a8ad92f81f7148a603e50e350c136aa7bf0efd405e5f529d9434f901c34c17b1f13f29d80673d1f7db19587ae9f7670b99c1541b39bc86eab9a419ca9774bfaec799a044e3c80cf3184b915e0f351f936146e4b2714fc2a71bdc7ac1e7d647076537884a4ed13f8") sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000240)=@ethernet={0x0, @random='P @#GQ'}, 0x80, 0x0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000600)=@bpq0='bpq0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) 03:53:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_destroy(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 03:53:34 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x821, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x543}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x8847000000000000, 0x2000000000000057]}) 03:53:34 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x6101, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000180)={0x60, 0xfffffffffffffffe, 0x2, {{0x3, 0x3, 0x650, 0x6, 0x4, 0xff, 0x1, 0x1000}}}, 0x60) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x300}}}}, 0x108) 03:53:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x84000, 0x0) accept(r0, &(0x7f0000000180)=@can={0x1d, 0x0}, &(0x7f0000000200)=0x80) sendmsg$xdp(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x2c, 0x0, r2, 0x1c}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)="29ad1cf4fd6f2a3768889bc45edc798bbd4955bd2f365d09927a6abcd14e828905c95a76e3fce272c93692cd6462ae98db8932d5594935c84d97d1c36aa1d51212132f505c0eab1bdc2549c1deac925092bfc2e18e82a6480947585064a27dd83f53fb0144375e7ecd87748a2b594705e8938db67b83587a216fcdf37062a34d1ba267a5e71be9529bcc6d242733a7e6b13d53c0fa", 0x95}, {&(0x7f0000000340)="129424f4fbac5aa4e733e24704c2da82d9aa3367d9200b5ef117df8dfaa120c352876463fec82a2a782eb6900710ed42f8965729156bc8a0918d8eba7460b9e581480276e49517e9f96a2cda1e86cd84455c741cd72e30efabeca150fadbe7d5125f09e78170e00d72d9d0efadbdd6ce487f1804c62b894ed995a1110d1a6cef4fead3d2c549b1d52acde3e8fa79b94432cbd38f03f1230e555b015f34629f5eab8d8a23196af9ca2af6fb05f72e31d48cbfa001ca14fe5a3476366500f1fa275dbbffff087263620c136ab345b9bfbd3f9906868151b014eae69f1ba9da315dd98bc6c9692037dfd914fad44879e1f5117f7df3e8", 0xf5}], 0x2, 0x0, 0x0, 0x81}, 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80001, 0x0) connect$rose(r3, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) fcntl$getown(r0, 0x9) [ 1498.551463] net_ratelimit: 30 callbacks suppressed [ 1498.551473] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1498.705416] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 03:53:34 executing program 1: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendto$unix(r0, &(0x7f00000000c0)="a7f40bd89cba888d4a707b7bd127bf2695aa40f652bad3fc151f4436d69ee1", 0x1f, 0x3f, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1603.925298] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1603.931624] rcu: 0-....: (10499 ticks this GP) idle=776/1/0x4000000000000002 softirq=153965/153965 fqs=5244 [ 1603.942510] rcu: (t=10500 jiffies g=210733 q=521) [ 1603.947524] NMI backtrace for cpu 0 [ 1603.951141] CPU: 0 PID: 9251 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #21 [ 1603.958217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.967550] Call Trace: [ 1603.970113] [ 1603.972248] dump_stack+0x1db/0x2d0 [ 1603.975860] ? dump_stack_print_info.cold+0x20/0x20 [ 1603.980880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1603.986401] ? do_raw_spin_lock+0x156/0x360 [ 1603.990710] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1603.995279] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1604.000202] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 1604.005481] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1604.010695] rcu_dump_cpu_stacks+0x183/0x1cf [ 1604.015092] ? find_next_bit+0x107/0x130 [ 1604.019154] print_cpu_stall.cold+0x227/0x40c [ 1604.023635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1604.029159] ? rcu_dynticks_snap+0x30/0x30 [ 1604.033376] ? __this_cpu_preempt_check+0x1d/0x30 [ 1604.038197] ? rcu_preempt_need_deferred_qs+0x71/0x1a0 [ 1604.043468] ? do_trace_rcu_torture_read+0x10/0x10 [ 1604.048391] ? get_state_synchronize_rcu+0xd0/0xd0 [ 1604.053332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1604.058849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1604.064367] ? check_preemption_disabled+0x48/0x290 [ 1604.069366] rcu_check_callbacks+0xb32/0x1380 [ 1604.073843] ? rcutree_dead_cpu+0x10/0x10 [ 1604.077975] ? trace_hardirqs_off+0xb8/0x310 [ 1604.082382] ? __lock_is_held+0xb6/0x140 [ 1604.086424] ? trace_hardirqs_on_caller+0x310/0x310 [ 1604.091424] ? check_preemption_disabled+0x48/0x290 [ 1604.096459] ? raise_softirq+0x189/0x430 [ 1604.100502] ? account_system_index_time+0x33f/0x5f0 [ 1604.105587] ? raise_softirq_irqoff+0x2d0/0x2d0 [ 1604.110239] ? check_preemption_disabled+0x48/0x290 [ 1604.115246] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1604.120767] ? hrtimer_run_queues+0x99/0x410 [ 1604.125181] ? run_local_timers+0x194/0x230 [ 1604.129488] ? timer_clear_idle+0x90/0x90 [ 1604.133622] ? account_process_tick+0x27f/0x350 [ 1604.138273] update_process_times+0x32/0x80 [ 1604.142594] tick_sched_handle+0xa2/0x190 [ 1604.146727] tick_sched_timer+0x47/0x130 [ 1604.150774] __hrtimer_run_queues+0x3a7/0x1050 [ 1604.155349] ? tick_sched_do_timer+0x1b0/0x1b0 [ 1604.159916] ? hrtimer_start_range_ns+0xda0/0xda0 [ 1604.164740] ? kvm_clock_read+0x18/0x30 [ 1604.168696] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1604.173696] ? ktime_get_update_offsets_now+0x3d5/0x5e0 [ 1604.179044] ? do_timer+0x50/0x50 [ 1604.182480] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1604.187997] ? clockevents_program_event+0x147/0x380 [ 1604.193090] hrtimer_interrupt+0x314/0x770 [ 1604.197358] smp_apic_timer_interrupt+0x18d/0x760 [ 1604.202181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1604.207023] ? smp_call_function_single_interrupt+0x640/0x640 [ 1604.212889] ? trace_hardirqs_off+0x310/0x310 [ 1604.217376] ? task_prio+0x50/0x50 [ 1604.220902] ? check_preemption_disabled+0x48/0x290 [ 1604.225902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1604.230731] apic_timer_interrupt+0xf/0x20 [ 1604.234949] [ 1604.237170] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 1604.242516] Code: 98 fe ff ff 48 c7 05 fb 03 d5 09 00 00 00 00 48 89 85 68 fe ff ff e9 85 df ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 65 8b 15 58 f6 [ 1604.261407] RSP: 0018:ffff888056ececa0 EFLAGS: 00000a06 ORIG_RAX: ffffffffffffff13 [ 1604.269094] RAX: ffffed100add9db9 RBX: ffffed100add9da9 RCX: ffffffff81a0912c [ 1604.276345] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 1604.283595] RBP: ffff888056eceef0 R08: ffff888084e4e240 R09: ffffed1015cc5b90 [ 1604.290842] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 1ffff1100add9dac [ 1604.298093] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888056eceec8 [ 1604.305369] ? find_get_entry+0xc3c/0x10a0 [ 1604.309587] ? find_get_entry+0x322/0x10a0 [ 1604.313807] ? retint_kernel+0x2d/0x2d [ 1604.317677] ? filemap_map_pages+0x1cb0/0x1cb0 [ 1604.322240] ? print_usage_bug+0xd0/0xd0 [ 1604.326279] ? retint_kernel+0x2d/0x2d [ 1604.330153] ? add_lock_to_list.isra.0+0x450/0x450 [ 1604.335065] ? retint_kernel+0x2d/0x2d [ 1604.338933] ? __find_get_block+0x8c6/0xf20 [ 1604.343234] ? find_held_lock+0x35/0x120 [ 1604.347288] ? __find_get_block+0x8c6/0xf20 [ 1604.351601] pagecache_get_page+0xe6/0x1020 [ 1604.355904] ? do_raw_spin_trylock+0x270/0x270 [ 1604.360615] ? add_to_page_cache_lru+0xd20/0xd20 [ 1604.365371] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1604.370885] ? __find_get_block+0x3a9/0xf20 [ 1604.375185] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1604.379939] ? end_buffer_async_read+0xb50/0xb50 [ 1604.384722] ? mark_buffer_dirty+0x8b0/0x8b0 [ 1604.389110] ? __find_get_block+0x3a9/0xf20 [ 1604.393427] ? __find_get_block+0x3ee/0xf20 [ 1604.397731] __getblk_gfp+0x38a/0xd20 [ 1604.401514] ? __find_get_block+0xf20/0xf20 [ 1604.405830] ? mark_held_locks+0xb1/0x100 [ 1604.409957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1604.415169] __bread_gfp+0x2f/0x300 [ 1604.418830] fat__get_entry+0x586/0xa40 [ 1604.422813] ? copy_overflow+0x30/0x30 [ 1604.426724] fat_search_long+0x345/0x17d0 [ 1604.430875] ? smack_log+0x436/0x5b0 [ 1604.434577] ? fat_parse_short+0x2b50/0x2b50 [ 1604.438963] ? smk_tskacc+0x3d3/0x520 [ 1604.442748] ? smack_privileged+0xd0/0xd0 [ 1604.446881] ? smk_curacc+0x7f/0xa0 [ 1604.450506] vfat_find+0x10e/0x140 [ 1604.454036] vfat_lookup+0x10a/0x6b0 [ 1604.457732] ? vfat_find_form+0x130/0x130 [ 1604.461864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1604.467383] ? security_inode_permission+0xd5/0x110 [ 1604.472382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1604.477917] ? security_inode_create+0xee/0x120 [ 1604.482566] ? vfat_find_form+0x130/0x130 [ 1604.486699] lookup_open+0x726/0x1b80 [ 1604.490484] ? vfs_link+0xb60/0xb60 [ 1604.494102] ? lock_release+0xc40/0xc40 [ 1604.498067] ? down_read+0x120/0x120 [ 1604.501767] path_openat+0x1983/0x5650 [ 1604.505642] ? add_lock_to_list.isra.0+0x450/0x450 [ 1604.510562] ? path_lookupat.isra.0+0xba0/0xba0 [ 1604.515211] ? do_dup2+0x580/0x580 [ 1604.518751] ? kasan_check_read+0x11/0x20 [ 1604.522878] ? do_raw_spin_unlock+0xa0/0x330 [ 1604.527267] ? do_raw_spin_trylock+0x270/0x270 [ 1604.531833] do_filp_open+0x26f/0x370 [ 1604.535614] ? may_open_dev+0x100/0x100 [ 1604.539578] ? retint_kernel+0x2d/0x2d [ 1604.543451] ? __alloc_fd+0x700/0x700 [ 1604.547248] ? getname_flags+0x277/0x5b0 [ 1604.551302] do_sys_open+0x59a/0x7c0 [ 1604.555362] ? filp_open+0x80/0x80 [ 1604.558887] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.564234] ? trace_hardirqs_off_caller+0x300/0x300 [ 1604.569322] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1604.574059] __x64_sys_creat+0x61/0x80 [ 1604.577927] do_syscall_64+0x1a3/0x800 [ 1604.581813] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1604.586724] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1604.591723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1604.596574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.601743] RIP: 0033:0x457ec9 [ 1604.604916] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1604.623813] RSP: 002b:00007fc4decf6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1604.631515] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457ec9 [ 1604.638768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1604.646019] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1604.653295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4decf76d4 [ 1604.660575] R13: 00000000004be42a R14: 00000000004ce8b8 R15: 00000000ffffffff [ 1604.668688] sched: RT throttling activated